Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:59:33 +0000 CVE-2025-71351 — picklescan - Remote Code Execution via timeit.timeit() Detection Bypass https://cve.radiocsirt.org/vuln/cve-2025-71351 <p><strong>Affected:</strong> picklescan</p> <p>picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ method, allowing remote code execution. Attackers can craft pickle files that import dangerous libraries like os and execute arbitrary system commands, which evade picklescan detection and execute when pickle.load() is called.</p> <p><strong>Affected:</strong> picklescan</p> <p>picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ method, allowing remote code execution. Attackers can craft pickle files that import dangerous libraries like os and execute arbitrary system commands, which evade picklescan detection and execute when pickle.load() is called.</p> https://cve.radiocsirt.org/vuln/cve-2025-71351