Downloads · 30 days
0
forge-mfv-pocs
forgeexecutive/forge-mfv-pocs
forge-mfv-pocs is a machine learning model from forgeexecutive. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
These PoC files demonstrate vulnerabilities in ML model file formats. Created for submission to huntr.com's Model File Vulnerabilities (MFV) bounty program.
Access
Public
Updated May 22, 2026
Repo size
420 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
.md1.9 KB · 33%
At a glance
- Access
- Public
- Created
- May 22, 2026
- Updated
- May 22, 2026
- SHA
- 18dbbd22
Model card
From the Hugging Face model README
Forge MFV PoCs — Model File Vulnerability Proofs of Concept
These PoC files demonstrate vulnerabilities in ML model file formats. Created for submission to huntr.com's Model File Vulnerabilities (MFV) bounty program.
Files
| File | Target | Bounty | Vulnerability |
|---|---|---|---|
| poc_gguf.bin | GGUF (llama.cpp) | $4,000 | n_kv heap overflow — crafted header causes OOB write |
| poc_safetensors.bin | SafeTensors (HuggingFace) | $4,000 | OOB read via data_offsets manipulation in metadata |
| poc_joblib.bin | Joblib (scikit-learn) | $4,000 | reduce ACE with protocol 2 pickle obfuscation |
| poc_keras.py | Keras (.keras) | $4,000 | Lambda layer cloudpickle deserialization ACE |
| poc_tensorrt.md | TensorRT (NVIDIA) | $4,000 | Integer overflow in network header layer count |
Submission Report
See submission_report.json for structured details.
Disclosure: These are vulnerability research artifacts for the huntr.com MFV program. Do not distribute outside of authorized security research.
- Created
- May 22, 2026
- Updated
- May 22, 2026