{"vulnerability": "cve-2025-7136", "sightings": [{"uuid": "c2cf55fc-6b2f-425e-8ded-cda47e567fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltflk5fpcw25", "content": "", "creation_timestamp": "2025-07-07T20:06:15.167072Z"}, {"uuid": "262f3779-d9ad-4d7d-8960-99ba17c5a064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moxk6f6zbv2o", "content": "CVE-2025-71365 - picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection Bypass\nCVE ID : CVE-2025-71365\n \n Published : 23 juin 2026 12:12 | 1\u00a0heure, 30\u00a0minutes ago\n \n Description : picklescan before 0.0.33 fails to detect malicious pickle files that ...", "creation_timestamp": "2026-06-23T13:49:55.895083Z"}, {"uuid": "963bafb2-7c33-4368-b13c-fbb395f89f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71361", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp22mka3ji2z", "content": "CVE-2025-71361 - picklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tip\nCVE ID : CVE-2025-71361\n \n Published : June 24, 2026, 11:53 a.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : picklescan before 0.0.29 fails to detect malicious idlelib.calltip.Ca...", "creation_timestamp": "2026-06-24T13:49:30.304515Z"}, {"uuid": "9affd109-bc53-4680-bc75-123b47586b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71361", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp24wkjxnn25", "content": "\u8981\u7d04\u751f\u6210\u306b\u5931\u6557\u3057\u305f\u305f\u3081\u3001\u8106\u5f31\u6027\u306e\u5b58\u5728\u306e\u307f\u901a\u77e5\u3057\u307e\u3059\u3002\nCVE-2025-71361 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-24T14:30:53.648434Z"}, {"uuid": "b9343bab-f048-45ea-b9cd-524ef223a3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71361", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2gbhq4zj2r", "content": "\u8981\u7d04\u751f\u6210\u306b\u5931\u6557\u3057\u305f\u305f\u3081\u3001\u8106\u5f31\u6027\u306e\u5b58\u5728\u306e\u307f\u901a\u77e5\u3057\u307e\u3059\u3002\nCVE-2025-71361 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-24T17:18:03.797532Z"}, {"uuid": "7b2f222c-02bc-43cc-a9c0-cdff1920a720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71361", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2o3pxmbq22", "content": "\u8981\u7d04\u751f\u6210\u306b\u5931\u6557\u3057\u305f\u305f\u3081\u3001\u8106\u5f31\u6027\u306e\u5b58\u5728\u306e\u307f\u901a\u77e5\u3057\u307e\u3059\u3002\nCVE-2025-71361 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-24T19:38:03.121540Z"}, {"uuid": "d5556fdb-0722-45eb-8bbf-62f0c3c2c124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71361", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2wtz5otc2y", "content": "picklescan 0.0.29\u672a\u6e80\u306f\u3001pickle\u30d5\u30a1\u30a4\u30eb\u5185\u306e\u60aa\u610f\u3042\u308bfetch_tip\u547c\u3073\u51fa\u3057\u3092\u691c\u51fa\u3067\u304d\u306a\u3044\u8106\u5f31\u6027\u3092\u6301\u3064\u3002\u653b\u6483\u8005\u306f\u3001\u5bfe\u8c61\u30b7\u30b9\u30c6\u30e0\u3067pickle.load()\u306b\u3088\u308a\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u2026\nCVE-2025-71361 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-24T22:14:45.682455Z"}, {"uuid": "75819384-ecbd-42e1-92ee-3b0ae1ffd2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71363", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkiocxvkt2o", "content": "CVE-2025-71363 - picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization\nCVE ID : CVE-2025-71363\n \n Published : June 30, 2026, 10:08 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : picklescan before 0.0.30 fails to detect cProfile.run functio...", "creation_timestamp": "2026-07-01T02:43:38.091765Z"}, {"uuid": "54ef3cfd-caf9-4db6-95ef-d976d190df01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkiwcd2cv2b", "content": "CVE-2025-71368 - picklescan - Arbitrary Code Execution via Undetected doctest.debug_script\nCVE ID : CVE-2025-71368\n \n Published : June 30, 2026, 10:08 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : picklescan before 0.0.30 fails to detect the doctest.debug_script function when...", "creation_timestamp": "2026-07-01T02:48:06.025285Z"}, {"uuid": "7f3068e2-7c59-4bfb-a3cc-e00a9abb5820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71368", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuzplbw52u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-71368 \u0432 Picklescan: \u043f\u043e\u0447\u0435\u043c\u0443 \u0432\u0430\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/236F2636-0326-4404-89EA-54BDAAE87499", "creation_timestamp": "2026-07-02T01:30:04.807724Z"}, {"uuid": "9db058b1-1036-4dc4-90a7-697a932640c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71360", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mps7zn5hhb2r", "content": "CVE-2025-71360 - picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity\nCVE ID : CVE-2025-71360\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.29 fails to detect malicious pickle files using idlelib...", "creation_timestamp": "2026-07-04T04:30:11.976814Z"}, {"uuid": "ee573b82-6f15-4b7b-b14a-dd4a36ada6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsbltlwan2h", "content": "CVE-2025-71366 - picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile\nCVE ID : CVE-2025-71366\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.28 fails to detect malicious torch.utils.bott...", "creation_timestamp": "2026-07-04T04:58:16.633549Z"}, {"uuid": "f02dbc15-2111-4aa4-8c4f-e8198dd050e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsburz5dx2n", "content": "CVE-2025-71364 - picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start\nCVE ID : CVE-2025-71364\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.30 fails to detect the asyn...", "creation_timestamp": "2026-07-04T05:03:16.939348Z"}, {"uuid": "e34db5bb-cf05-4114-b7c4-86736722f189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsc6b4ra425", "content": "CVE-2025-71369 - picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers\nCVE ID : CVE-2025-71369\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.28 fails to detect malicious pickle f...", "creation_timestamp": "2026-07-04T05:08:34.900322Z"}, {"uuid": "9533ecb2-7c62-4baf-a388-fdb95a5a9af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpscz4fsdo2o", "content": "CVE-2025-71362 - picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran\nCVE ID : CVE-2025-71362\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.33 fails to detect unsafe deserializatio...", "creation_timestamp": "2026-07-04T05:23:35.775583Z"}, {"uuid": "a8a8a18f-f532-4e0f-91c1-b8ca17a838ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsdkzbpgt2o", "content": "CVE-2025-71367 - picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass\nCVE ID : CVE-2025-71367\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.34 fails to detect _operator.attrgetter function calls ...", "creation_timestamp": "2026-07-04T05:33:36.625251Z"}, {"uuid": "64271c73-3fee-4e1a-801d-b26024c7b544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71360", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsz6dcx2l2g", "content": "\ud83d\udfe0 CVE-2025-71360 - High (8.1)\n\npicklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71360/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T12:00:13.765468Z"}, {"uuid": "0ae16baf-e614-4e12-a237-001329040f0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71362", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpszae66bj2o", "content": "\ud83d\udfe0 CVE-2025-71362 - High (8.1)\n\npicklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran func...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71362/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T12:01:21.496689Z"}, {"uuid": "085b2398-914e-4760-beb9-09e44470786a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71364", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpszakqetf2d", "content": "\ud83d\udfe0 CVE-2025-71364 - High (8.1)\n\npicklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71364/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T12:01:28.599509Z"}, {"uuid": "20461039-e581-4bbb-86a1-ff35a6e05fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71366", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpszar7yf52d", "content": "\ud83d\udfe0 CVE-2025-71366 - High (8.1)\n\npicklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71366/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T12:01:35.296510Z"}, {"uuid": "707017db-4747-4f8d-bbb8-12afb7328843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71367", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpt4kx6m7d27", "content": "\ud83d\udfe0 CVE-2025-71367 - High (8.1)\n\npicklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71367/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T13:00:58.202968Z"}, {"uuid": "3bc4c774-0bbc-4ab2-97fb-529d2aefd193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71369", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpt4l5slfv2b", "content": "\ud83d\udfe0 CVE-2025-71369 - High (8.1)\n\npicklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapip...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71369/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T13:01:05.178664Z"}, {"uuid": "6e825f89-e7dc-4ced-8d81-c89765e3dc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71360", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpt54gcrtw2v", "content": "\ud83d\udfe0 CVE-2025-71360 - High (8.1)\n\npicklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity ...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2025-71360/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T13:10:44.307742Z"}, {"uuid": "e9cfc9ca-ec3c-48bd-b263-2d28e7137ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71361", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-8r4j-24qv-fmq9", "content": "", "creation_timestamp": "2026-07-20T22:35:34.560803Z"}]}