How I used ChatGPT to build a ReDoS vulnerability scanner in just an hour, found 6 vulnerabilities in HuggingFace’s Transformers, got paid $750, and earned 6 CVEs.
Posts for: #CVE
TensorFlow CVE-2021-37678 – YAML Deserialization RCE
A look into how I discovered an RCE in TensorFlow/Keras caused by unsafe YAML deserialization, how it worked, and what I learned from it.