python-codext

CodExt Кодируйте/декодируйте что угодно. CodExt — это библиотека совместимая с Python2-3, расширяющая встроенную библиотеку codecs а именно для добавления новых пользовательских кодировок и символьных отображений и предоставляющая 120+ новых кодеков , отсюда и её название, образованное от CODecs...

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the...

9Router <= 0.4.36 - Unauthenticated RCE

9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...

thethe

위협 헌팅 환경 당신은 위협 헌터입니다. 조사 중에 브라우저에서 20개 이상의 탭이 열려 있고, 데이터가 담긴 .txt 파일들이 흩어져 있으며, 배경에 몇몇 터미널이 떠 있는 자신을 발견한 적이 있나요? theTHE는 조사에 관한 모든 정보를 단일 프로젝트로 중앙집중화하고 그 결과를 귀하의 팀과 공유합니다다른 사람과는 공유하지 않음. theTHE는 API 응답을 캐시하므로 요청을 반복할 필요가 없습니다. 키를 공유하지 말고 사용자가 서비스에 직접 호출하도록 하십시오. theTHE는 또한 일부 명령줄 도구가 통합되어 있어 터미널...

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

regipy

regipy ⚠️ v6.0.0의 주요 변경 사항 버전 6.0.0에는 중요한 현대화 변경 사항이 포함되어 있습니다: Python 3.9+ 필요 - Python 3.6, 3.7, 3.8 지원 중단 attrs 라이브러리 제거 - 데이터 클래스는 이제 Python 내장 dataclasses 모듈을 사용합니다. 코드에서 내부 클래스Cell, VKRecord, Value, Subkey를 가져와서 attr.asdict 같은 attrs 함수를 사용한다면, dataclasses.asdict로 전환하세요. 자세한 내용은 CHANGELOG를...

whad-client

WHAD: 무선 해킹 장치 이 프레임워크는 무선 프로토콜과 장치를 가지고 놀거나/해킹하거나/탐색하기 위한 명령줄 도구 모음과, 호환되는 펌웨어를 실행하는 하드웨어 장치와 함께 사용할 강력한 무선 도구를 만들기 위한 라이브러리를 제공합니다. 설치 설치는 pip로 매우 간단합니다: root@kitploit: pip install whad 온라인 문서 프로젝트 문서는 ReadTheDocs에서 확인할 수 있습니다. 단위 테스트 실행 기본 Python 버전의 단위 테스트는 다음 명령으로 로컬에서 실행할 수 있습니다:...

PYSEC-2026-2908 PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcpserver/adapters/clitools.py: "registers four file-handling tools by default, praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and...

MAL-2026-7005 Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

PT-2026-42036

Name of the Vulnerable Software and Affected Versions 9router versions 0.4.30 through 0.4.36 Description 9router contains a flaw where the Next.js middleware fails to protect several API endpoints, allowing unauthenticated network-adjacent attackers to execute arbitrary OS commands as the user...

EUVD-2019-17185

Malware in sbrugna...

EUVD-2019-0003

Malware in sbrugna...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, openfga, k9s, buildkitd, buildah, goreleaser, falcoctl, kargo, zarf, osv-scanner, docker-compose, nerdctl, spire-server, dagger, apko, aws-otel-collector, syft, buf, zot, cadvisor, melange, opentelemetry-collector-contrib, trivy, wolfictl,...

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

RHEL 8 : Red Hat OpenShift Serverless Client kn 1.12.0 (Moderate) (RHSA-2021:0145)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0145 advisory. Red Hat OpenShift Serverless Client kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for non-Linux...

USN-6773-1: .NET vulnerabilities

It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. CVE-2024-30045 It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use th...

BIT-RABBITMQ-2021-32718 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper tag sanitization, potentially allowing for JavaScript code execution in the...

Fedora: Security Advisory for kde-cli-tools (FEDORA-2023-e31c3e4b6c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5798-1: .NET 6 vulnerability

Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service condition for an exposed endpoint...