poastal

Poastal - 电子邮件 OSINT 工具 Poastal 是一个电子邮件 OSINT 工具，能提供任何电子邮件地址的有价值信息。使用 Poastal，您可以轻松输入一个电子邮件地址，它会迅速回答几个问题，为您提供关键信息。 ✨ 功能特性 确定拥有该电子邮件的人员姓名。 检查电子邮件是否可投递。 查明电子邮件是否为临时邮箱。 识别该电子邮件是否被视为垃圾邮件。 检查该电子邮件是否在热门平台（如 Facebook、Twitter、Snapchat、Parler、Rumble、MeWe、Imgur、Adobe、Wordpress 和 Duolingo）上注册。 💻 使用说明...

secfixes-tracker

Alpine Security Fix Tracker Este é um aplicativo web Flask que rastreia correções de segurança no Alpine. Ao usar o secdb do Alpine, podemos geralmente deduzir quais CVEs foram e não foram corrigidas. Algumas extensões ao esquema de relatórios do secfixes serão adicionadas para permitir que os...

flask_appengine_redirector

flaskappengineredirector Redirector C2 Flask per Google App Engine Un semplice esempio di applicazione Python Flask pronta per essere eseguita su App Engine. Configurazione di sviluppo Installare l'SDK: https://cloud.google.com/sdk/docs/ Eseguire l'istanza di sviluppo: devappserver.py app.yaml...

cve-2021-21980-mock-server

Clippy of the Dead – CVE-2021-21980 Testumgebung und Nuclei-Vorlage ======================================================================= Dieses Repository enthält eine hochzuverlässige Nuclei-Vorlage zum Erkennen von CVE-2021-21980 Path Traversal im vSphere Web Client sowie eine kleine...

log4j-honeypot-flask

log4j-honeypot-flask Honeypot per rete interna per rilevare se un attaccante o una minaccia interna scansiona la tua rete per log4j CVE-2021-44228 Può essere installato su una workstation o server, eseguendo direttamente lo script Python app/app.py necessario python3, Flask e Requests o come...

EUVD-2026-55229

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...

CVE-2026-72577 NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...

CVE-2026-71241

CVE-2026-71241 affects a Book-Management-System built with Flask. Several endpoints (/student, /record, /books, /find_stu_book, /find_not_return_book) are missing the @login_required decorator that protects related routes (/search_student, /storage). This misconfiguration allows any unauthenticat...

Exploit for Improper Input Validation in Pyyaml

Seal Security — Python pip Example A minimal, intentionally...

CVE-2026-3962 Jcharis Machine-Learning-Web-Apps Jinja2 Template app.py render_template cross site scripting

A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5. The impacted element is the function rendertemplate of the file Machine-Learning-Web-Apps-master/Build-n-Deploy-Flask-App-with-Waypoint/app/app.py of the component Jinja2 Template...

Sensitive Information Exposure

Flask is vulnerable to Sensitive Information Exposure. The vulnerability is due to incomplete handling of the Vary: Cookie header when accessing the session object, where certain access patterns e.g., using the in operator fail to mark responses as user-specific, allowing caching proxies to store...

SQLi-Exfiltration-Lab

SQL Injection SQLi - Database Exfiltration Lab Overview...

SQLi

SQL Injection CTF Challenge - Quick Start Guide Files Over...

Simple-Flask-Deserialize-Demo-Exploit-Code

Simple-Flask-Deserialize-D...

Exploit for Code Injection in Langchain Langchain-Experimental

CVE-2024-21513 PoC for CVE-2024-21513 Original exploit documen...

Flask Weak Secret Key

Flask applications use an application key to encrypt and sign various data, including session cookies and other sensitive information. When a weak or easily guessable application key is used, it compromises the security of the entire application. Attackers can potentially decrypt sensitive data,...

[SECURITY] Fedora 39 Update: python-flask-security-too-5.1.2-3.fc39

Flask-Security quickly adds security features to your Flask application...

CVE-2022-31509

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

Cross site scripting

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....