68018 matches found
CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
EUVD-2026-94383
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
CVE-2026-107204
LMCache versions through 0.5.5 are vulnerable to an unauthenticated remote code execution (RCE) vulnerability via the /run_script endpoint. The root cause is that attackers can post scripts to this endpoint and recover real builtins through the injected FastAPI app object , which allows them to b...
CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
EUVD-2026-94371
Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style markdownextensions configuration. An authenticated attacker who can register or influence an SCM-backed documentation...
CVE-2025-24893_Shell
2025-24893Shell requirements: httpx use: python exploit.py victim.com...
Drupal_REST-RCE_Unauthenticated
CVE-2019-6340 — Drupal RESTful Web Services RCE Python implementation of the remote code execution exploit for CVE-2019-6340, based on analysis of the Metasploit module and the prior work by leonjza. Key difference from EDB-46459: uses POST instead of GET, bypassing Drupal's page cache — can be...
CVE-2021-40438-POC
Note: Intended only for educational and controlled testing purposes. Only test on systems you have permission to assess. CVE-2021-40438 - SSRF Exploit ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...
regipy
regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...
regipy
regipy ⚠️ v6.0.0 में ब्रेकिंग बदलाव संस्करण 6.0.0 में महत्वपूर्ण आधुनिकीकरण परिवर्तन शामिल हैं: Python 3.9+ आवश्यक - Python 3.6, 3.7, और 3.8 के लिए समर्थन हटा दिया गया attrs लाइब्रेरी हटा दी गई - डेटा क्लासेस अब Python के अंतर्निहित dataclasses मॉड्यूल का उपयोग करते हैं यदि आपका कोड आंतरिक...
CVE-2022-22965
spring4shell ⭐ a python implementation of CVE-2022-22965 that provides a prompt to the user in the style of an ssh session. the script is designed to be easy to understand and execute, with both readability and accessbility - depending on the user's choice. Designed for exploiting the vulnerabili...
Deserializer
Deserializer حول المشروع Deserializer هو محرك تحليل ثابت متقدم لشجرة التركيب المجردة AST مصمم لتحديد عمليات إعادة بناء الكائنات غير الآمنة ومصارف استمرارية الحالة عبر منظومة Python، مع تركيز قوي على مجالات الذكاء الاصطناعي، ونماذج اللغة الكبيرة LLM، والروبوتات، وعلوم البيانات، وتعلم الآلة، والتعل...
cve-2023-37635
CVE-2023-37635 - Exploitation Guide Installation & Setup 1️⃣ Install Dependencies pip install -r requirements.txt 2️⃣ Run the Exploit With a proxy: python brutForc.py Without a proxy: python brutForc.py -n Notes: Replace with the target URL. The -n flag disables proxy usage. ⚠️ Disclaimer : This...
CVE-2017-0199
Exploit toolkit CVE-2017-0199 Exploit toolkit CVE-2017-0199 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victi...
CVE-2026-105801
A flaw was found in openapi-python-client. The generator fails to properly sanitize input from OpenAPI specification documents before rendering code strings and docstrings into generated Python files. An attacker could supply a specially crafted specification to inject arbitrary Python code,...
CVE-2014-6271
CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. 📝 Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...
CVE-2025-32433-exploit
CVE-2025-32433-exploit rlwrap -cAr nc -lnvp 4444 python3 exploit.py...
CVE-2021-41773.git1
CVE-2021-41773 Fast python tool to test apache path traversal CVE-2021-41773 in a List of url Usage :- create a live urls file and use the flag "-l" python3 apachepathtraversal.py -l urls-list.txt...