enumerate-iam

Enumerare i permessi IAM Hai trovato un set di credenziali AWS e non hai idea di quali permessi possa avere? $ ./enumerate-iam.py --access-key AKIA... --secret-key StF0q... 2019-05-10 15:57:58,447 - 21345 - INFO Starting permission enumeration for access-key-id "AKIA..." 2019-05-10 15:58:01,532 -...

wp-def

wp-def Wordpress Default User + Pass Python 2.7 Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Use? Install Python 2.7 Download Here python file.py...

Security update for python-msgpack

This update for python-msgpack fixes the following issue CVE-2026-57585: Unpacker reuse after a caught error can lead to an out-of-bounds read and a crash bsc1269947. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:4443-1 Security update for python-msgpack

This update for python-msgpack fixes the following issue - CVE-2026-57585: Unpacker reuse after a caught error can lead to an out-of-bounds read and a crash bsc1269947...

pyvex

PyVEX PyVEX è un binding Python per il VEX IR. Link del progetto Repository del progetto: https://github.com/angr/pyvex Documentazione: https://api.angr.io/projects/pyvex/en/latest/ Installazione di PyVEX PyVEX può essere installato tramite pip: pip install pyvex Utilizzo di PyVEX import pyvex...

python-paddingoracle

python-paddingoracle: Eine portable Padding-Oracle-Exploit-API AKTUALISIERT FÜR PYTHON 3 python-paddingoracle ist eine API, die Pentestern eine anpassbare Alternative zu PadBuster und anderen Padding-Oracle-Exploit-Tools bietet, die nicht einfach ohne größere Umschreibung in einzigartigen,...

EUVD-2026-92275

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...

CVE-2026-105314

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...

CVE-2026-105314

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...

CVE-2026-105314

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...

CVE-2026-105245

The sgl-project sglang library (up to version 0.5.21 ) contains a vulnerability in the HTTP Endpoint component, specifically within the server_info function of the python/sglang/srt/entrypoints/http_server.py file. Manipulation of the api_key argument can result in the cleartext transmission of s...

CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

EUVD-2026-92264

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-84305

A flaw was found in sqlparse, a non-validating SQL parser module for Python. A remote attacker could exploit this by providing specially crafted parenthesized tuple lists. When these lists are reindentated, the software performs numerous offset calculations, leading to quadratic CPU consumption...

CVE-2026-54121

cve-id Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso Sencillo Usa este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos autorizados de...

[SECURITY] Fedora 43 Update: python-urllib3-2.8.0-1.fc43

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...

[SECURITY] Fedora 43 Update: python-streamlink-8.4.0-2.fc43

Streamlink is a command-line utility that pipes video streams from various services into a video player, such as VLC. The main purpose of Streamlink is to allow the user to avoid buggy and CPU heavy flash plugins but still be able to enjoy various streamed content. There is also an API available...

CVE-2026-105314: Path Traversal: '../filedir'

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...

CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...