rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the “serializer: pickle” HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed with unpickle. (CVSS:7.5) (Last Update:2022-11-05)Latest security vulnerabilities (Execute Code) (CVSS score >= 6)

ZERO Days Security
Pwn2Own Vancouver 2023 – The Full Schedule
Welcome to Pwn2Own Vancouver for 2023! This year’s event promises some exciting research as we have 19 entries targeting nine different targets – including two