Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2019-6446 — Numpy deserialization command execution | Kitploit
Tools/GitHubGitHub/rayscri/cve-2019-6446
Vulnerability AnalysisCode AnalysisExploitationBinary AnalysisLearning & Education
GitHubrayscri/cve-2019-6446

CVE-2019-6446

Numpy deserialization command execution

View Repository
337 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2019-6446 Numpy Deserialization Command Execution

NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the parameter allow_pickle of the load function in lib/npyio.py or change its value to False to avoid the deserialization issue; in the tested version 1.16.3 (Mac/Windows), the load function removed the allow_pickle parameter. However, command execution still exists. The latest version tested is 1.16.3

As shown

Reference:https://mp.weixin.qq.com/s/9qwTTtQdpIjH8f0CcDYs6g

Download Tool