CVE-2026-18503 vulnerabilities

Vulnerabilities for packages: python...

GHSA-2345-WR3R-CXF2 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-18503 vulnerabilities

Vulnerabilities for packages: python...

GHSA-2345-WR3R-CXF2 vulnerabilities

Vulnerabilities for packages: python...

Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()

...

CVE-2026-48804

A flaw was found in python-socketio, a Python implementation of the Socket.IO realtime client and server. The server stores binary messages in memory while awaiting their attachments. A remote attacker can exploit this by sending a binary message and deliberately withholding some attachments. Thi...

ROOT-APP-PYPI-CVE-2026-27026 CVE-2026-27026 in pypdf - Patched by Root

Root has patched CVE-2026-27026 in the pypdf package for Root:PyPI. Multiple fixed versions available...

[SECURITY] [DSA 6441-1] python-httplib2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6441-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2026 https://www.debian.org/security/faq -...

RHSA-2026:54528 Red Hat Security Advisory: python-pillow security update

Bulletin has no description...

dirsearch v0.5.0

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Este es un exploit en Python Para teniendo u...

SUSE CVE-2026-73233

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp passes the xDisplacementFormula, yDisplacementFormula, and zDisplacementFormula fields of a...

CVE-2026-73678: Improper Control of Generation of Code

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...

Oracle Linux 9 : python-idna (ELSA-2026-54484)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54484 advisory. 2.10-8 - Security fix for CVE-2026-45409 Resolves: RHEL-215653 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Finding Vulnerabilities Via LLM-Augmented Semantics-Aware Type-Checking

Vulnerability detection via static analysis traditionally relies on security experts encoding insecure coding patterns into algorithmic rules. However, this approach often focuses on syntactic patterns and overlooks deeper semantic information in the code, such as the meanings of variable and...

Debian dsa-6441 : python3-httplib2 - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6441 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6441-1 [email protected] https://www.debian.org/security/...

cellmerge (>=0.1.0, <=0.1.1), jupyter-quant (2606.1.0) +4 more potentially affected by CVE-2026-73417 via jupyterlab (>=4.6.0, <=4.6.1)

jupyterlab PYPI version =4.6.0, =0.1.0, =1.2.0, =0.1.0, =0.1.1 - tiatoolbox 2.1.3 Source cves: CVE-2026-73417 Source advisory: MEND:CVE-2026-73417...

cellmerge (>=0.1.0, <=0.1.1), jupyter-quant (2606.1.0) +4 more potentially affected by CVE-2026-73416 via jupyterlab (>=4.6.0, <=4.6.1)

jupyterlab PYPI version =4.6.0, =0.1.0, =1.2.0, =0.1.0, =0.1.1 - tiatoolbox 2.1.3 Source cves: CVE-2026-73416 Source advisory: MEND:CVE-2026-73416...

MAL-2026-13978 Malicious code in datefmt-util-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d897db063e1782ce6549adbac0736b75a2708f864c8eacfeaabac56b76c1bcbb Package presents itself as a date-formatting utility but ships a postinstall reverse shell. package.json declares scripts.postinstall = 'node...

speakeasy v2.0.0b6

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...