nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
7fc419787b71a253a3f19e5b2fda7984aa614d65
PoC-in-GitHub/2024/CVE-2024-37054.json
T

278 lines
9.7 KiB
JSON
Raw Blame History

[
{
"id": 1042708007,
"name": "CVE-2024-37054-MLflow-RCE",
"full_name": "NiteeshPujari\/CVE-2024-37054-MLflow-RCE",
"owner": {
"login": "NiteeshPujari",
"id": 47559537,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47559537?v=4",
"html_url": "https:\/\/github.com\/NiteeshPujari",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/NiteeshPujari\/CVE-2024-37054-MLflow-RCE",
"description": "NiteeshPujari\/CVE-2024-37054, This repository contains a Proof of Concept (PoC) a critical deserialization vulnerability in MLflow that allows for Remote Code Execution (RCE). ",
"fork": false,
"created_at": "2025-08-22T12:54:40Z",
"updated_at": "2026-06-10T04:30:05Z",
"pushed_at": "2025-08-22T12:56:44Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1241206969,
"name": "CVE-2024-37054",
"full_name": "ben-slates\/CVE-2024-37054",
"owner": {
"login": "ben-slates",
"id": 122673839,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122673839?v=4",
"html_url": "https:\/\/github.com\/ben-slates",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ben-slates\/CVE-2024-37054",
"description": null,
"fork": false,
"created_at": "2026-05-17T04:54:16Z",
"updated_at": "2026-10-10T23:03:07Z",
"pushed_at": "2026-05-17T16:36:41Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1241902854,
"name": "CVE-2024-37054-PoC",
"full_name": "jimmexploit\/CVE-2024-37054-PoC",
"owner": {
"login": "jimmexploit",
"id": 158514227,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158514227?v=4",
"html_url": "https:\/\/github.com\/jimmexploit",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jimmexploit\/CVE-2024-37054-PoC",
"description": "PoC for CVE-2024-37054",
"fork": false,
"created_at": "2026-05-18T00:27:12Z",
"updated_at": "2026-09-19T15:48:20Z",
"pushed_at": "2026-05-18T00:35:01Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1242370650,
"name": "CVE-2024-37054-MLflow-reverse-shell",
"full_name": "Spydomain\/CVE-2024-37054-MLflow-reverse-shell",
"owner": {
"login": "Spydomain",
"id": 199271706,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199271706?v=4",
"html_url": "https:\/\/github.com\/Spydomain",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Spydomain\/CVE-2024-37054-MLflow-reverse-shell",
"description": null,
"fork": false,
"created_at": "2026-05-18T11:15:46Z",
"updated_at": "2026-05-18T11:30:02Z",
"pushed_at": "2026-05-18T11:29:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1243980247,
"name": "CVE-2024-37054",
"full_name": "tristanqtn\/CVE-2024-37054",
"owner": {
"login": "tristanqtn",
"id": 77152870,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77152870?v=4",
"html_url": "https:\/\/github.com\/tristanqtn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tristanqtn\/CVE-2024-37054",
"description": "CVE-2024-37054 exploit and documentation",
"fork": false,
"created_at": "2026-05-19T21:15:25Z",
"updated_at": "2026-06-03T22:59:05Z",
"pushed_at": "2026-05-19T22:00:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1377331946,
"name": "CVE-2024-37054-PoC",
"full_name": "ClearLotus-git\/CVE-2024-37054-PoC",
"owner": {
"login": "ClearLotus-git",
"id": 71709864,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71709864?v=4",
"html_url": "https:\/\/github.com\/ClearLotus-git",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ClearLotus-git\/CVE-2024-37054-PoC",
"description": null,
"fork": false,
"created_at": "2026-09-19T15:43:10Z",
"updated_at": "2026-09-19T19:42:29Z",
"pushed_at": "2026-09-19T19:42:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1383882783,
"name": "CVE-2024-37054",
"full_name": "BardLaudian\/CVE-2024-37054",
"owner": {
"login": "BardLaudian",
"id": 58039786,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58039786?v=4",
"html_url": "https:\/\/github.com\/BardLaudian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BardLaudian\/CVE-2024-37054",
"description": "Generic PoC for MLflow pickle deserialization RCE (CVE-2024-37054-style). Poisons a registered model via the MLflow REST API to achieve code execution when the model is loaded.",
"fork": false,
"created_at": "2026-09-23T17:05:04Z",
"updated_at": "2026-09-23T17:08:56Z",
"pushed_at": "2026-09-23T17:06:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2024-37054",
"exploit",
"machine-learning-security",
"mlflow",
"mlops-security",
"pentest",
"pickle-deserialization",
"poc",
"python",
"rce",
"redteam"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1389036336,
"name": "CVE-2024-37054_PoC_HTB_SmartHire",
"full_name": "0o176\/CVE-2024-37054_PoC_HTB_SmartHire",
"owner": {
"login": "0o176",
"id": 200080997,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200080997?v=4",
"html_url": "https:\/\/github.com\/0o176",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0o176\/CVE-2024-37054_PoC_HTB_SmartHire",
"description": "MLFlow unsafe deserialization (CVE-2024-37054) written for HTB machine - SmartHire",
"fork": false,
"created_at": "2026-09-26T10:38:11Z",
"updated_at": "2026-11-02T13:57:51Z",
"pushed_at": "2026-09-26T10:47:15Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink