You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

PoC: HDF5 intermediate ExternalLink bypass

Files

evil.weights.h5: malicious Keras weights file
secret_weights.h5: external HDF5 file referenced through an intermediate ExternalLink
poc.py: reproduction script
uild_poc_weights.py: rebuilds the HDF5 artifacts
SUBMISSION_TITLE.txt: title to paste into Huntr
SUBMISSION_DESCRIPTION.md: description to paste into Huntr

Reproduction

ash pip install keras tensorflow-cpu h5py python poc.py

Expected output includes: ext BASE_BEFORE [0.0] PRED_AFTER [424242.0]

The PoC is self-contained. It ships the malicious evil.weights.h5 and the linked external HDF5 file secret_weights.h5 in the same repository. No additional attachments are required.

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support