72876 matches found
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Openclaw
--- CVE-2026-4040 – Race Condition in File Upload Leading to...
Exploit for External Control of Assumed-Immutable Web Parameter in Google Chrome
--- 10. CVE-2026-9998 – Insecure Deserialization in Blockcha...
Fedora 44 : python-nh3 / rust-ammonia (2026-61f0d68398)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-61f0d68398 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...
CVE-2026-69243: Inconsistent Interpretation of HTTP Requests
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability...
CVE-2026-69248: Improper Certificate Validation
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of .example.com,...
CVE-2026-69249: Uncontrolled Resource Consumption
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same...
ROS-20260803-73-0001
The vulnerability in pyOpenSSL is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CVE-2026-69249: Uncontrolled Resource Consumption
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same...
python312-3.12.13-8.1 on GA media (moderate)
python312-3.12.13-8.1 on GA media Announcement ID: openSUSE-SU-2026:11428-1 Rating: moderate Cross-References: CVE-2026-0864 CVE-2026-11940 CVE-2026-11972 CVE-2026-15308 CVE-2026-3276 CVE-2026-4360 CVE-2026-7210 CVE-2026-7774 CVE-2026-8328 CVSS scores: CVE-2026-0864 SUSE : 7.5...
python313-sentry-sdk-2.66.1-1.1 on GA media (moderate)
python313-sentry-sdk-2.66.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11425-1 Rating: moderate Cross-References: CVE-2024-40647 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
openSUSE 16 Security Update : python-joserfc (openSUSE-SU-2026:21515-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21515-1 advisory. Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token...
hexora v0.3.1
hexora Hexora is a static analysis tool designed to detect malicious and harmful patterns in Python code. It combines a rule-based static analysis engine with a machine-learned model that scores entire source files to classify them as malicious or benign. It can be used to: Audit project...
voidaccess v2.0.1
VoidAccess Self-hostable OSINT for turning dark-web research queries into structured threat intelligence. Built for security researchers, threat-intelligence teams, and authorized investigators who need collection, enrichment, relationship mapping, and export in one workflow. Terminal Output Quic...
Deploy MQTT Reverse Agent
Generate and optionally execute a stdlib Python MQTT reverse agent from an existing shell session. Pairs with listeners/iot/reversemqttshell. !/usr/bin/env python3 -- coding: utf-8 -- """Post module: package/show MQTT reverse agent for delivery from a shell session.""" from kittysploit import fro...
ImCurvin v1.3.0
ImCurvin' ImCurvin is an open-source web security auditing and penetration testing tool designed to automate environment misconfiguration detection, track exposed configuration blueprints, and probe backend vulnerabilities. Detailed information regarding ImCurvin can be found at...
antimatter (0.1.3), autotrain-advanced (>=0.6.42, <=0.6.44) +12 more potentially affected by CVE-2026-9856 via transformers (4.34.1)
transformers PYPI version 4.34.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - antimatter 0.1.3 - autotrain-advanced =0.6.42, =4.3.0, =1.22.0rc1, =1.0.1, =0.1.69, =0.1.73 - spacy-transformers 1.3.2 Source cves:...
Malicious Package
Overview trongriden is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-11429 Malicious code in trongriden (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb2a16e0023940b622e66acf21c1597d4127d94fb730610f509960e49754c3f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
Malicious code in trongriden (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb2a16e0023940b622e66acf21c1597d4127d94fb730610f509960e49754c3f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...