Know the vulnerability. Understand the risk.
A reference index of HiddenLayer disclosures. Discovery credit and technical guidance remain with the original researchers.
↗ External reference library. Publications and findings are credited to HiddenLayer. They are not Virtual Arc research or customer results.
All resources
73 references
Pickle Load on Artifact Get
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Path Traversal on File Download
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Improper Auth Leading to Arbitrary Read-Write Access
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Cross-Site Request Forgery in ClearML Server
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Web Server Renders User HTML Leading to XSS
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Credentials Stored in Plaintext in MongoDB Instance
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Path sanitization bypass leading to arbitrary read
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Out of bounds read due to lack of string termination in assert
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Command Injection in Capture Dependency
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Command Injection in CaptureDependency Function
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Cloudpickle Load on Sklearn Model Load Leading to Code Execution
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Cloudpickle Load on Langchain AgentExecutor Model Load Leading to Code Execution
An external vulnerability advisory reference. Consult the original disclosure for affected versions, technical evidence, remediation, and researcher attribution.
View advisory reference ↗Build your understanding.
One concept at a time.
A stronger security position starts with a conversation.
Bring your questions. We’ll help define an assessment around your systems.
Book a scoping call