nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2026-21018-OPC-UA-Authentication-Bypass-via-None-Security-Policy

CVE-2026-21018 – None セキュリティポリシーによる OPC UA 認証バイパス プログラムコード Python opcua-asyncio sim opcuaserversim.py - OPC UA server accepting None security policy from asyncua import Server import asyncio async def main: server = Server await server.init...

Raccoon

라쿤 정찰 및 정보 수집을 위한 공격 보안 도구 기능 DNS 세부 정보 DNS 덤프스터를 사용한 DNS 시각적 매핑 WHOIS 정보 TLS 데이터 - 지원되는 암호화, TLS 버전, 인증서 세부 정보 및 SAN 포트 스캔 서비스 및 스크립트 스캔 URL 퍼징 및 디렉토리/파일 탐지 서브도메인 열거 - Google 도킹, DNS 덤프스터 쿼리, SAN 발견 및 무차별 대입 사용 웹 애플리케이션 데이터 검색: CMS 탐지 웹 서버 정보 및 X-Powered-By robots.txt 및 사이트맵 추출 쿠키 검사 모든 퍼징 가능한 U...

udpack

UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...

udpack

UDPack UDPack은 확장 가능한 범용 UDP 패킷 난독화기입니다. 이 애플리케이션의 목적은 UDP 데이터 스트림의 경로에 위치하여 패킷을 난독화, 역난독화 또는 수정하는 것입니다. 이 스크립트는 asyncio 라이브러리를 사용하므로 Python 3.4 이상이 필요합니다. 항상 최신 Python 릴리스를 사용하는 것을 강력히 권장합니다. 기본 기능에는 서드파티 의존성이 필요 없지만, XChaCha20Poly1305Packer는 PyNaCl이 필요합니다. 경고: 이 애플리케이션의 목적이 암호화 가 아니라 난독화 라는 점을...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

knxmap

KNXmap IP 기반 네트워크에서 KNXnet/IP 게이트웨이를 스캔하고 감사하기 위한 도구입니다. KNXnet/IP는 KNXEN 50090, ISO/IEC 14543의 물리적 통신 매체로 이더넷을 정의합니다. KNXmap은 KNXnet/IP 게이트웨이를 통해 KNX 버스의 장치를 스캔할 수도 있습니다. 스캔 외에도 KNXmap은 버스 메시지 모니터링 또는 그룹 주소에 임의의 값 쓰기와 같은 다른 모드로 KNX 게이트웨이와 상호 작용할 수 있습니다. 호환성 KNXmap은 asyncio 모듈에 크게 의존하므로 Python 3....

CLEANSTART-2026-LF94693 AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework

Security vulnerability affects the airflow-3 package. AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework...

SUSE CVE-2026-77528

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce that limit against the compressed frame length before inflation but do not recheck the...

CVE-2026-64847 AnyIO process-pool workers can block indefinitely on undrained stderr

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool workers with standard error connected to a pipe that the parent never drains, even though the documented behavior redirects all three...

Linux Distros Unpatched Vulnerability : CVE-2026-62949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior...

Arbitrary Argument Injection

Overview aiosmtplib is an aiosmtplib is an asynchronous SMTP client for use with asyncio. Affected versions of this package are vulnerable to Arbitrary Argument Injection in the parseaddress function of src/aiosmtplib/email.py, which returns parsedaddress or address.strip, so a malformed mailbox...

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

SummaryChat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

Summary Chat histories are stored as an unvalidated JSON object. After a message is deleted, the code that picks the chat's new current message walked down the childrenIds links without recording where it had already been. Any account with the default user role could store a chat whose messages...

GHSA-3CGP-3CQX-J8W2 Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

Summary Chat histories are stored as an unvalidated JSON object. After a message is deleted, the code that picks the chat's new current message walked down the childrenIds links without recording where it had already been. Any account with the default user role could store a chat whose messages...

GHSA-JQHH-CJMQ-VMV6 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

[SECURITY] Fedora 44 Update: python-asyncmy-0.2.14-1.fc44

asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql and aiomysql but rewrites the core protocol with Cython to speed it up...

[SECURITY] Fedora 43 Update: python-asyncmy-0.2.14-1.fc43

asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql and aiomysql but rewrites the core protocol with Cython to speed it up...

CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

UBUNTU-CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...