SUSE SLED15 / SLES15 Security Update : python-msgpack (SUSE-SU-2026:4443-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4443-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: Unpacker reuse after a caught error can lead...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

CVE-2022-22954

CVE-2022-22954 VMware Workspace ONE Access ثغرة تنفيذ التعليمات البرمجية عن بُعد Code By:Junsheng @橘子网络安全实验室 橘子网络安全实验室 https://0range.team/ 0x00 نظرة عامة على المخاطر هذه الأداة مخصصة فقط لاختبارات الأمان المصرح بها، ويُحظر الهجمات غير المصرح بها على المواقع. قراءة عبر الإنترنت قانون الأمن...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

shellshock-shell

shellshock-shell أداة بسيطة تشبه الصدفة بلغة بايثون لاستغلال ثغرة Shellschok CVE-2014-6271. استخدمها لاستغلال عناوين URL المعروفة بأنها ضعيفة. يجب استخدام هذه الأداة فقط على عناوين URL المصرح بها من قبلك. مؤلف هذه الأداة لا يتحمل أي مسؤولية عن استخدامها. اسم الملف: shellshock.py المؤلف: Sagi Levy...

Code-Roulette

Code Roulette لعبة روليت روسية متعددة اللاعبين عبر الإنترنت، بواجهة طرفية، حيث يقوم الخاسر بتنفيذ ملف بايثون الخاص بالفائز. Code Roulette Overview How the Game Works Demo Video Usage As a Package With the UV Package Manager With Pip Payload Files Development Licensing The Main Components The...

vt-py-scanner

VirusTotal Scanner Python script to analyze ALL files with the VirusTotal API, scanning folders and subfolders recursively. Optimized for Windows. Features Scans ALL files in a folder and its subfolders Configuration via .env file - Save your API key and settings Interactive mode - Also works...

nextjs-CVE-2025-29927-hunter

حول أداة بايثون بسيطة تقوم بأتمتة عمليات البحث في Shodan وتصفية عناوين IP/النطاقات المستهدفة لتحديد الأصول التي قد تكون عرضة لـ CVE-2025-29927 في تطبيقات Next.js. الاستخدام استخراج كل من عناوين IP والنطاقات python3 nextjs-CVE-2025-29927-hunter.py -t target.com استخراج النطاقات فقط python3...

ms15-034-Scan

ms15-034-scan python3 مسح جماعي لثغرة ms15-034/CVE-2015-1635 الاستخدام python3 ms-socket.py url.txt أضف الأصول الخاصة بك إلى url.txt الإخراج إلى result.txt بدون إزالة http:// و https:// استبدل يدويًا في المفكرة باستخدام ctrl+h...

Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

GHSA-QQJ6-54Q6-CXV6 Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

CVE-2024-29269

تثبيت وتشغيل السكربت 💻 المتطلبات الأساسية قبل البدء، تأكد من أن لديك الأدوات التالية مثبتة على جهازك: Python 3.x Git pip لإدارة تبعيات بايثون خطوات التثبيت 1. استنساخ المستودع استخدم git لاستنساخ المستودع: git clone git clone https://github.com/dream434/CVE-2024-29269 2. الانتقال إلى دليل المشروع...

EUVD-2026-91794

LangGraph SDK custom auth silently ignores actions= on resource decorators...

LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

GHSA-FVWW-7H3R-VFHP LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

GHSA-W584-2H2R-2HVF Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Summary: A critical Authenticated Remote Code Execution RCE vulnerability exists in the validatecode function of Langflow. The /api/v1/validate/code endpoint, meant to validate user-supplied code, leverages Python's exec function. While it attempts to restrict execution to function definitions, i...