CVE-2026-4360

A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...

CVE-2026-66138

A vulnerability was found in Ironic-Python-Agent's IPA time syncing code. The value of the ntpserver configuration option is inserted into a shell command without sanitization. This command is run as root very early in the IPA startup flow, allowing an attacker to run arbitrary commands as root...

CVE-2026-66053

A flaw was found in Apache Thrift Python bindings. This vulnerability, stemming from improper validation of certificates with host mismatch, could allow a remote attacker to intercept and access sensitive information. The issue occurs when the Python client fails to adequately verify the server's...

CVE-2026-41608

A flaw was found in Apache Thrift Python bindings. This vulnerability involves the improper handling of highly compressed data, leading to a data amplification issue. An attacker could exploit this by providing specially crafted compressed input, which may cause the application to consume excessi...

Python Requirements File Disclosure Detection

Detected Python requirements.txt file. This file contains Python package dependencies and versions that could reveal technology stack, vulnerable package versions, and internal dependencies. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Python requirements.""" from kittysploit import from...

Marimo Panel - Detect

Marimo is an open-source reactive Python notebook and app framework that replaces Jupyter with git-friendly, reproducible notebooks. !/usr/bin/env python3 -- coding: utf-8 -- """Marimo is an open-source reactive Python notebook and app framework that replaces Jupyter with git-friendly, r.""" from...

Python Django Admin Login Panel - Detect

Python Django admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Python Django admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Python Django Admin Login Panel...

Autobahn-Python Webserver Detect

Detects Autobahn-Python Webserver Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Autobahn-Python Webserver Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Autobahn-Python Webserver...

OpenVPN Monitor - Detect

openvpn-monitor was discovered. OpenVPN Monitor is a simple python program to generate html that displays the status of an OpenVPN server, including all its current connections. !/usr/bin/env python3 -- coding: utf-8 -- """openvpn-monitor was discovered.""" from kittysploit import from...

Python Virtual Environment Directory Exposure Detection

An exposed Python virtual environment directory allows public access to internal files like pyvenv.cfg, installed packages, and configurations. This can leak sensitive information and aid attackers in identifying or exploiting vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """An expos...

Python Setup Configuration - Exposure Detection

Python Setup Configuration "setup.py" File was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Python Setup Configuration "setup.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Python Setup Configuration -...

Tableau Python Server Panel - Detect

Tableau Python Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tableau Python Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tableau Python Server Panel - Detect',...

Polynote Panel - Detect

Polynote is a polyglot notebook supporting Scala, Python, SQL, and Spark with a rich UI !/usr/bin/env python3 -- coding: utf-8 -- """Polynote is a polyglot notebook supporting Scala, Python, SQL, and Spark with a rich UI.""" from kittysploit import from lib.protocols.http.httpclient import...

Python History File Disclosure Detection

Detected exposed .pythonhistory files on web servers.These files contained Python REPL command history that could have leaked sensitive information such as credentials, API keys, internal paths, database queries, and system commands. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed...

Detect Python Exposed Metrics

Information Disclosure of Garbage Collection !/usr/bin/env python3 -- coding: utf-8 -- """Information Disclosure of Garbage Collection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Python Exposed Metrics',...

instaloader v4.15.3

.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...

SUSE-SU-2026:22959-1 Security update for python313, python3

This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error...

OPENSUSE-SU-2026:21459-1 Security update for python313, python3

This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error...

BIT-THRIFT-2026-66053 Apache Thrift: Python TSSLSocket Hostname Matcher Import

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603...

BIT-THRIFT-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...