GHSA-VF76-F5CP-9846 Duplicate Advisory: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w3v8-gmh9-3wv7. This link is maintained to preserve external references. Original Description NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The...

Duplicate Advisory: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w3v8-gmh9-3wv7. This link is maintained to preserve external references. Original Description NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The...

CVE-2026-82397

Tornado (Python web framework / async networking library), prior to 6.5.8 , parses application/x-www-form-urlencoded request bodies via urllib.parse.parse_qs in tornado/escape.py without passing max_num_fields. Because RequestHandler._execute parses the body before handler dispatch, an unauthenti...

CVE-2026-82397 Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the body before handl...

Updated python-hpack packages fix a security vulnerability

An issue was found in the python-hyper/hpack library, most commonly used as a downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively...

MGASA-2026-0349 Updated python-hpack packages fix a security vulnerability

An issue was found in the python-hyper/hpack library, most commonly used as a downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively...

DefaScan

Defascan: Defacement Scan and Alert root@kitploit: | \ / | | | | |/ \ | / / |/ / | ' \ | || | / | | \ \ | | | | | | |/ || ,|/\,|| || Defascan is a python tool that will scrape the internet for your given google dork queries using APIs and alert using the email provied during rutime. Installation...

CVE-2015-1579

CVE-2015-1579 - WP Revslider AFD Exploit: Wordpress Slider Revolution Responsive = 4.1.4: root@kitploit: Fecha de vulnerabilidad: 24/07/2014 Autor del exploit: anarc0der Versión: Wordpress Slider Revolution Responsive = 4.1.4 CVE : CVE-2015-1579 Cómo usar: root@kitploit: python3 xpl.py...

[SECURITY] Fedora 44 Update: python-pip-26.0.1-3.fc44

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

[SECURITY] Fedora 44 Update: GitPython-3.1.60-1.fc44

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

K000163140: Python vulnerability CVE-2026-1502

Security Advisory Description CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported releases for...

Security update for python-httplib2

This update for python-httplib2 fixes the following issue: CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate can lead to OOM-kill in the client process when it connects to a compromised HTTP server bsc1271095. Patch Instructions: To...

SUSE-SU-2026:3898-1 Security update for python-httplib2

This update for python-httplib2 fixes the following issue: - CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate can lead to OOM-kill in the client process when it connects to a compromised HTTP server bsc1271095...

havij

Havij – SQL Injection Tool Linux Native Havij is a native Linux port of the classic Havij 1.15 Pro SQL injection tool. It replicates the original interface, dark theme, and green‑text aesthetic — but runs natively on Linux using Python and PyQt6. ⚠️ Disclaimer: This tool is for educational and...

PCLink v4.7.0

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

CVE-2026-57585

A flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free CWE-416, occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by repeatedly providing untrusted input, leading to an...

GoogleRecaptchaBypass — Updated!

Google Recaptcha Solver We love bots ❤️, but Google doesn't. So, here is the solution to bypass Google reCAPTCHA. Solve Google reCAPTCHA less than 5 seconds! 🚀 This is a Python script to solve Google reCAPTCHA using the DrissionPage library. Selenium implementation will be added soon. Recent...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in security patch ina-release-callhomeimage-1.0.2.3. Vulnerability Details CVEID:CVE-2026-8384 DESCRIPTION: In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of:...

Python-Example

Seal Security — Exemple Python pip Une application Flask minimale et intentionnellement vulnérable utilisée pour démontrer, de bout en bout, comment Seal Security corrige une CVE connue en remplaçant une dépendance vulnérable par une version scellée rétroportée, prête à l'emploi — sans aucune...

PT-2026-89660

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parse qs in tornado/escape.py without passing max num fields. RequestHandler. execute in tornado/web.py parses the body before...