Medium: python-requests

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

Amazon Linux 2 : python-requests (ALAS-2025-2868)

The version of python-requests installed on the remote host is prior to 2.6.0-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2868 advisory. Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...

CVE-2024-9953

A potential denial-of-service DoS vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profile, which may lead to a DoS condition when the profile is accessed. While the Django server restrict...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2022-40238

A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed...

CVE-2019-14056

u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in...

CVE-2025-37980

creationtimestamp| type| source ---|---|--- 2025-05-20 17:45:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17036 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2022-49177

creationtimestamp| type| source ---|---|--- 2025-05-20 14:41:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16994 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-42125

creationtimestamp| type| source ---|---|--- 2025-05-20 14:40:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16988 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-44962

creationtimestamp| type| source ---|---|--- 2025-05-20 14:40:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16985 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...

CVE-2024-49898

creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16659 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-49909

creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16658 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-49929

creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16655 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-50048

creationtimestamp| type| source ---|---|--- 2025-05-16 07:33:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16646 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-48766

creationtimestamp| type| source ---|---|--- 2025-05-15 12:34:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16477 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

Alibaba Cloud Linux 3 : 0001: python-requests (ALINUX3-SA-2025:0001)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2025:0001 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior t...

ALSA-2025:7049 Moderate: python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2025-37870

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15701 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-37878

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15694 2025-05-09 10:22:00+00:00| seen| https://t.me/cvedetector/24932 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...