PT-2026-107101

Name of the Vulnerable Software and Affected Versions hydra-optuna-sweeper versions 1.2.0 through 1.3.0 hydra-optuna-sweeper versions 1.4.0.dev1 through 1.4.0.dev9 Description The hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom search space, whi...

CentOS Linux 8.4 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (CENTOS8.4:CLSA-2026:1791280039)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791280039 advisory. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially craft...

ALSA-2026:77017 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ALSA-2026:77021 Important: python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ALSA-2026:77028 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ALSA-2026:77020 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

CVE-2022-22954

CVE-2022-22954 VMware Workspace ONE Access Remote Code Execution Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

shellshock-shell

shellshock-shell A simple python shell-like exploit for the Shellschok CVE-2014-6271 bug. Use it to exploit known vulnerable URLs. This tool may be used only on your own authorized URLs. The author of this tool takes no responsibility for its usage. File name: shellshock.py Author: Sagi Levy -...

Code-Roulette

Code Roulette Terminal interface based, online multiplayer, Russian Roulette where the loser executes the winner's Python payload file. Code Roulette Overview How the Game Works Demo Video Usage As a Package With the UV Package Manager With Pip Payload Files Development Licensing The Main...

vt-py-scanner

VirusTotal Scanner Python script to analyze ALL files with the VirusTotal API, scanning folders and subfolders recursively. Optimized for Windows. Features Scans ALL files in a folder and its subfolders Configuration via .env file - Save your API key and settings Interactive mode - Also works...

nextjs-CVE-2025-29927-hunter

About A simple Python tool that automates Shodan searches and filters target IPs/domains to identify assets potentially vulnerable to CVE-2025-29927 in Next.js deployments. Usage Extract both IPs and domains python3 nextjs-CVE-2025-29927-hunter.py -t target.com Only extract domains python3...

ms15-034-Scan

ms15-034-scan python3 Batch scan for ms15-034/CVE-2015-1635 vulnerability Usage python3 ms-socket.py url.txt Add assets to url.txt yourself Output to result.txt Did not remove http:// and https:// Replace manually in notepad using ctrl+h...

Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

GHSA-QQJ6-54Q6-CXV6 Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

CVE-2024-29269

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone git clone...

EUVD-2026-91794

LangGraph SDK custom auth silently ignores actions= on resource decorators...

LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...