parseq
Datasets
All datasets matching “parseq”parseq_osd_v1parseq-file-read-poc
PARSeqTokenizer Arbitrary File Read PoC
Vulnerability: PARSeqTokenizer.set_vocabulary() in keras-hub calls open(vocabulary, "r") on config-supplied string path without any safe_mode check or path validation.
Files
malicious_model.keras — Crafted .keras ZIP with PARSeqTokenizer config pointing vocabulary to /etc/passwd
poc.py — Full PoC script demonstrating the vulnerability
Reproduction
pip install keras keras-hub tensorflow
python poc.py
The PoC creates a… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/parseq-file-read-poc.