Vulnerabilidades en picklescan

51 resultados
Análisis Vexday

O picklescan apresenta 46 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando risco recente e em evolução. Oito dessas vulnerabilidades são críticas (CVSS alto), predominantemente relacionadas à desserialização insegura (CWE-502), que permite execução remota de código. Embora nenhuma esteja sob ataque ativo documentado no momento, o volume concentrado de divulgações recentes exige atenção imediata em ambientes que processam dados serializados de fontes não confiáveis.

CVE-2025-71368HIGHpicklescan - Arbitrary Code Execution via Undetected doctest.debug_scriptEPSS 0.8%CVE-2025-71323CRITICALpicklescan - Remote Code Execution via Unblocked ctypes ModuleEPSS 0.8%CVE-2026-56315CRITICALpicklescan - Remote Code Execution via Unblocked Standard Library ModulesEPSS 0.8%CVE-2025-71351HIGHpicklescan - Remote Code Execution via timeit.timeit() Detection BypassEPSS 0.7%CVE-2025-71374HIGHpicklescan - Arbitrary Code Execution via Undetected profile.Profile.runEPSS 0.6%CVE-2025-71344HIGHpicklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip FunctionEPSS 0.6%CVE-2025-71352HIGHpicklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle FilesEPSS 0.6%CVE-2025-71321CRITICALpicklescan - Arbitrary File Writing via distutils Module BypassEPSS 0.6%CVE-2025-71320CRITICALpicklescan - Remote Code Execution via Incomplete Disallowed InputsEPSS 0.6%CVE-2026-3490CRITICALpicklescan - Universal Blocklist Bypass via pkgutil.resolve_nameEPSS 0.6%CVE-2025-71363HIGHpicklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle DeserializationEPSS 0.6%CVE-2025-71349HIGHpicklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle FilesEPSS 0.6%CVE-2025-71364HIGHpicklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._startEPSS 0.6%CVE-2025-71355HIGHPicklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection BypassEPSS 0.6%CVE-2025-71339HIGHPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length GadgetEPSS 0.5%CVE-2026-53874CRITICALpicklescan - Arbitrary Code Execution via Obfuscated eval CallEPSS 0.5%CVE-2026-53872HIGHpicklescan - Arbitrary File Read via Unsafe Pickle DeserializationEPSS 0.5%CVE-2025-71371HIGHpicklescan - Remote Code Execution via code.InteractiveInterpreter Detection BypassEPSS 0.5%CVE-2025-71325CRITICALpicklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic FlawEPSS 0.5%CVE-2025-71341HIGHpicklescan - Remote Code Execution via Undetected profile.Profile.runctxEPSS 0.5%