Downloads · 30 days
0
pickle-rce-poc
dashimubounty-bit/pickle-rce-poc
pickle-rce-poc is a machine learning model from dashimubounty-bit. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as apache-2.0.
--- license: apache-2.0 tags: - pickle - rce - deserialization - security ---
Access
Public
Updated Jun 22, 2026
Repo size
673 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 57%
At a glance
- License
- apache-2.0
- Access
- Public
- Created
- Jun 22, 2026
- Updated
- Jun 22, 2026
- SHA
- adc3cf93
Model card
From the Hugging Face model README
license: apache-2.0 tags:
- pickle
- rce
- deserialization
- security
Pickle RCE Proof of Concept
Vulnerability
Remote Code Execution in pickle.load() via unsafe deserialization
Root Cause
pickle module internally executes arbitrary code during unpickling
PoC Files
| File | Description |
|---|---|
| poc.pkl | Basic RCE confirmation |
Reproduction
import pickle
pickle.load(open('poc.pkl', 'rb'))() # Trigger
- License
- apache-2.0
- Created
- Jun 22, 2026
- Updated
- Jun 22, 2026