CVE-2025-11833-PoC

Comprobador de CVE-2025-11833 python3 main.py --url http://localhost --username admin --loot Este repositorio es solo para fines educativos y de investigación. El autor no asume ninguna responsabilidad por el uso indebido. Siempre prueba los PoCs en un entorno controlado y aislado...

GHSA-54P9-H82J-F925 vulnerabilities

Vulnerabilities for packages: airflow, crossplane-function-pythonic, authentik, mlflow-fips, puppygraph-python, wazuh-manager, wazuh-manager-fips, py3-cassandra-medusa, authentik-fips, request-1276...

CVE-2026-104874 vulnerabilities

Vulnerabilities for packages: airflow, crossplane-function-pythonic, authentik, mlflow-fips, puppygraph-python, wazuh-manager, wazuh-manager-fips, py3-cassandra-medusa, authentik-fips, request-1276...

CVE-2021-21389

Uso 1. Configura el entorno vulnerable de wordpress y buddypress construyendo docker. 2. Construye y ejecuta el contenedor mariaDB. 3. Haz que los dos contenedores se ejecuten en la misma red. ej: docker network create wordpressnetwork docker network connect wordpressnetwork wordpressapp docker...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

CVE-2026-93616_Checks

Instalación Mueve compromise-check.sh al servidor de gestión de Check Point chmod +x compromise-check.sh Script de Shell Ejecuta estos comandos en modo Expert en el servidor de gestión de Check Point, desde el directorio que contiene compromise-check.sh. Script de SmartDashboard...

Scrapegraph-ai v2.3.1

🚀 Looking for an even faster and simpler way to scrape at scale only 5 lines of code? Check out our enhanced version at ScrapeGraphAI.com! 🚀 🕷️ ScrapeGraphAI: You Only Scrape Once English | 中文 | 日本語 | 한국어 | Русский | Türkçe | Deutsch | Español | français | Português | Italiano ScrapeGraphAI is a...

rcekit

RCEKit executed means the target executed the input. negative means the probes reached it. Version 3.0.1 · MIT · Python 3.8+ · zero third-party dependencies RCEKit is an RCE detection & confirmation toolkit for authorised penetration testing, red teaming and security research. Point it at a targe...

[SECURITY] Fedora 44 Update: python3.14-3.14.8-1.fc44

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

cisagov__check-cve-2019-19781.4142e02b

check-cve-2019-19781 🔎🐞 此工具用于检测一台主机是否容易受到CVE-2019-19781漏洞的影响。 需求 Python 3.6 及以上版本。注意， 不支持 Python 2。 安装 从发布版本安装： pip install https://github.com/cisagov/check-cve-2019-19781/releases/download/v1.0.1/cve201919781-1.0.1-py3-none-any.whl 从源码安装： git clone...

XXStrike

XXStrike cat README.md ⚡ XXStrike v2.0 Suite de Escaneo y Fuzzing XSS Cross-Site Scripting de Nueva Generación Desarrollado por: Maxod anonmoty 🔰 Repositorio Oficial: https://github.com/anonmoty/XXStrike Descripción General • Características Clave • Módulos • Instalación • Uso • Comparativa •...

POC_CVE-2025-53558

CVE-2025-53558 免责声明 本程序应仅用于授权的安全测试与研究目的，请使用者遵照网络安全法合理使用。 使用者使用该工具出现任何非法攻击等违法行为，与作者无关。 使用 python3 CVE-2025-53558.py URL...

EnvVisualizer

EnvVisualizer . . . \ / \ \ / /|| | | || | / \ / /\ Y / | |/ / | \ \ | | | \ // \ \ | \ | \ / \ / | |\ | | // | || |/ /\ /| | / / /| // / |/ / /// \ | / / / / / / Analiza, categoriza y visualiza/proc/self/environ en máquinas Linux comprometidas. Convierte un muro de texto de variables...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Laboratorio de Seguridad Sudo Proyecto educativo desarrollado en Python con enfoque en el análisis de la vulnerabilidad CVE-2021-3156 Baron Samedit , una falla crítica en sudo que permitía elevación de privilegios local en sistemas Linux. 📌 Objetivo del Proyecto Este proyecto fu...

PT-2026-107583

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.4:CLSA-2026:1791413715)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791413715 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context...

RHEL 8 : python3.12 (RHSA-2026:77028)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77028 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

AlmaLinux 8 : python3.12 (ALSA-2026:77028)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77028 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of a...

PT-2026-107562

Name of the Vulnerable Software and Affected Versions LMCache versions 0.5.5 and earlier Description An unauthenticated remote code execution issue exists where remote attackers can execute Python code by sending scripts to the '/run script' endpoint. By leveraging the injected FastAPI app object...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1791403199)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791403199 advisory. - The stringprep module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were use...