GHSA-84QC-6H9R-4W33 vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...

GHSA-JC8J-9799-C943 vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal...

GHSA-JPHX-Q7F7-4X8R vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...

GHSA-MQQ7-J9MQ-9JWQ vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal...

GHSA-QQRG-CHVW-Q8JP vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...

pwndbg v2026.09.15

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540)

Summary Multiple vulnerabilities in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerability Details CVEID:CVE-2026-40347...

Zircolite v4.0.0

Standalone Sigma-based detection for EVTX, Auditd, Sysmon for Linux, XML, CSV and JSON logs Zircolite runs Sigma rules over your logs. It flattens events into SQLite, turns each rule into an SQL query and reports what matches, offline, in one command. Many log formats , detected automatically:...

vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

Exploit for CVE-2026-74469

CVE-2026-7469 Donate Help maintain this pr...

Exploit for CVE-2026-68121

cve-id Donate Help maintain this project...

PT-2026-104828

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse entry point def in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

CVE-2026-61652: Allocation of Resources Without Limits or Throttling

Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion. The issue affects all callers who streamed compressed responses relying on the chunk size — explicit iterbyteschunksize=... or the default — to bound memory. The decoder ignored that...

OPENSUSE-SU-2026:11831-1 bazel-rules-python-source-2.3.3-1.1 on GA media

These are all security issues fixed in the bazel-rules-python-source-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-61541: Allocation of Resources Without Limits or Throttling

Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service when an application requests content from an untrusted server, or follows a redirect to one, because a malicious response containing an excessive number of chained Content-Encoding values causes Zapros to...

VulnCheck KEV: CVE-2026-54569

SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SENAITE.CORE JSON API permits unauthenticated remote code execution through a two-request chain involving missing authorization and unsafe evaluation. The state-changing routes in...

Security update for python-asteval (moderate)

openSUSE Security Update: Security update for python-asteval Announcement ID: openSUSE-SU-2026:0329-1 Rating: moderate References: 1273147 Cross-References: CVE-2026-55244 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...

Security update for python-jwcrypto (moderate)

openSUSE Security Update: Security update for python-jwcrypto Announcement ID: openSUSE-SU-2026:0328-1 Rating: moderate References: 1277639 Cross-References: CVE-2026-80179 CVSS scores: CVE-2026-80179 SUSE: 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products:...

TencentOS Server 2: python-tornado (TSSA-2026:1040)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1040 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

SUSE SLED15 / SLES15 Security Update : python-tornado6 (SUSE-SU-2026:4076-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4076-1 advisory. This update for python-tornado6 fixes the following issue - CVE-2026-82397: an unauthenticated request body containing...