RayScri/CVE-2019-6446

PoC

Numpy deserialization command execution

view exploit source poc_in_githubauthor RayScripublished 2019-05-15catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-6446US	critical9.8	17.5% (97th)	Exploit	2019-01-16
An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object,…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.