Lucene search
+L

1230 matches found

Kitploit
Kitploit
•added 2026/10/02 5:54 p.m.•16 views

Project-CVE-2026-50751

CVE-2026-50751 IKEv1 Security Testing Description This Python script is an offensive security-testing framework designed to target CVE-2026-50751, a Check Point IKEv1 VPN authentication-bypass vulnerability. Features Scans IP addresses for IKEv1 VPN services on UDP port 500 Attempts to identify...

9.3CVSS8.3AI score0.06301EPSS
SaveExploits7
PyPA
PyPA
•added 2026/10/01 4:38 p.m.•9 views

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

SummaryThe LightRAG API server passes raw Python exception messages directly into HTTPerror responses across 30+ error handlers in every router. When combined withthe default unauthenticated configuration see companion report on CWE-306, anynetwork-reachable client can trigger exceptions whose ra...

5.3CVSS5.7AI score0.00386EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
•added 2026/09/30 3:41 p.m.•9 views

EUVD-2026-88479

PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse PyJWKClient.getsigningkeyfromjwt / verifysignature=False...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/30 3:53 a.m.•11 views

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

10CVSS7.8AI score0.99802EPSS
SaveExploits407
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-102265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueErro...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/28 9:17 p.m.•6 views

AZL-105230 CVE-2026-102265 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/28 9:17 p.m.•5 views

DEBIAN-CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/28 9:17 p.m.•11 views

CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS0.00291EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/28 9:17 p.m.•6 views

DEBIAN-CVE-2026-101918

PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.getsigningkeyfromjwt is affected because payload parser catches ValueError but not RecursionError. This occurs when an attacker-controlled recursively nested payload reaches json.loads. As a...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/28 9:17 p.m.•7 views

AZL-105218 CVE-2026-101918 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.getsigningkeyfromjwt is affected because payload parser catches ValueError but not RecursionError. This occurs when an attacker-controlled recursively nested payload reaches json.loads. As a...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/28 9:17 p.m.•8 views

CVE-2026-101918

PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.getsigningkeyfromjwt is affected because payload parser catches ValueError but not RecursionError. This occurs when an attacker-controlled recursively nested payload reaches json.loads. As a...

5.3CVSS0.00291EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/28 9:17 p.m.•6 views

UBUNTU-CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/09/28 9:17 p.m.•7 views

CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/28 9:17 p.m.•7 views

UBUNTU-CVE-2026-101918

PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.getsigningkeyfromjwt is affected because payload parser catches ValueError but not RecursionError. This occurs when an attacker-controlled recursively nested payload reaches json.loads. As a...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/09/28 8:48 p.m.•9 views

CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/28 8:48 p.m.•9 views

EUVD-2026-88549

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/28 8:48 p.m.•39 views

CVE-2026-102265 PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS0.00291EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/28 8:48 p.m.•103 views

CVE-2026-102265

The PyJWT Python library (versions 2.13.0 through 2.13.x ) is vulnerable due to a missing exception handler in the PyJWS._load function within jwt/api_jws.py. The parser currently catches ValueError but fails to catch RecursionError, which can be triggered when processing a deeply nested token he...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•5 views

CVE-2026-102265: Uncontrolled Recursion

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•2 views

PT-2026-102348

Name of the Vulnerable Software and Affected Versions PyJWT versions 2.0.0a1 through 2.14.9 Description The PyJWKClient.get signing key from jwt function and the jwt/api jwt.py implementation when verify signature=False are affected by an issue where the payload parser catches ValueError but fail...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References8
Rows per page
Query Builder