vim security update

An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

SUSE SLED15 / SLES15 Security Update : python-sqlparse (SUSE-SU-2026:3435-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3435-1 advisory. This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to...

OPENSUSE-SU-2026:11428-1 python312-3.12.13-8.1 on GA media

These are all security issues fixed in the python312-3.12.13-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11427-1 python311-3.11.15-8.1 on GA media

These are all security issues fixed in the python311-3.11.15-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11429-1 python315-3.15.0~b4-1.1 on GA media

These are all security issues fixed in the python315-3.15.0b4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-67080

These are all security issues fixed in the python313-huggingface-hub-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 7 : python-tornado (ELSA-2026-24342)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-24342 advisory. - Backport fix for CVE-2026-31958 Orabug: 39521310 Tenable has extracted the preceding description block directly from the Oracle Linux security...

OPENSUSE-SU-2026:11425-1 python313-sentry-sdk-2.66.1-1.1 on GA media

These are all security issues fixed in the python313-sentry-sdk-2.66.1-1.1 package on the GA media of openSUSE Tumbleweed...

VulnCheck KEV: CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

SUSE SLES15 Security Update : python-sqlparse (SUSE-SU-2026:3434-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3434-1 advisory. This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service...

OPENSUSE-SU-2026:11426-1 python310-3.10.20-8.1 on GA media

These are all security issues fixed in the python310-3.10.20-8.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-11424 Malicious code in telerape (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 21e8fc4f3dd969ec103ff1cb8a5bdba0d465bffffabe2615bc38d8e00606cffa Package places a reverse shell in the PTH file. In analyzed versions, the target was on localhost. --- Category: MALICIOUS - The campaign has clearly malicious...

CVE-2026-53501

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can insert...

Slack Socket Mode / Web API Polling Agent

Writes a Python implant that polls a Slack channel for commands and posts results. Controller: listeners/messaging/slacksocketmode. Requires a Slack bot token on the implant — install as backdoor, not exploit payload. from kittysploit import class ModuleBackdoor: """Slack Web API polling implant ...

Python DNS Reverse Shell

Poll DNS TXT records for commands and exfil output via result queries stdlib UDP DNS — no dnspython required on target. Pairs with listeners/covert/dns. from kittysploit import from lib.c2.dnsreverseagent import buildpythondnsagentscript class ModulePayload: """DNS TXT polling agent — deliverable...

Python MQTT Reverse Shell

Connect to an MQTT broker, subscribe to cmd topic, publish results stdlib MQTT 3.1.1 — no paho required on target. Pairs with listeners/iot/reversemqttshell. from kittysploit import from lib.c2.mqttreverseagent import buildmqttreverseagentscript class ModulePayload: """MQTT reverse shell agent —...

Filesystem Dropbox-like Polling Agent

Writes a Python implant that uses a shared directory as C2 dead-drop register/commands/results. Controller: listeners/filesystem/dropboxlikepolling. Requires a shared path SMB/NFS/sync — install as backdoor, not exploit payload. from kittysploit import class ModuleBackdoor: """Filesystem dead-dro...

Python Reverse WebSocket Shell

Connect back over WebSocket and provide an interactive command shell stdlib only from kittysploit import import base64 class ModulePayload: CLIENTLANGUAGE = "python" info = "name": "Python Reverse WebSocket Shell", "description": "Connect back over WebSocket and provide an interactive command she...

Python Reverse TCP (thin / EXE stager)

Minimal Python reverse TCP shell. generate returns a compact one-liner; set compileexe=true to build a Windows EXE via Zig getpythonscript. Designed as a thin stager for exploit chains. from kittysploit import class ModulePayload: """Thin Python reverse TCP payload with optional Zig compile-to-EX...

Python AWS SQS Reverse Shell

Poll an SQS command queue for tasks and publish results to a response queue. Uses boto3 when available, otherwise falls back to aws CLI. Pairs with listeners/aws/reverseawssqs. from kittysploit import from lib.c2.awssqsreverseagent import buildawssqsreverseagentscript class ModulePayload: """AWS...