Code injection via pickle module

[partywavesec]

It's possible to inject code via pickle module by using artifacts from older python2 release.

How to reproduce

1. Create the payload using pickle
2. Use module with unsafe load combined with user input, such as medpy_intensity_range_standardization.py
3. The standard execution will crash probably at the next operations but the injection is triggered at load time

Impact

Code execution and command injection