poastal

Poastal — инструмент OSINT для email Poastal — это инструмент OSINT для email, который предоставляет ценную информацию о любом email-адресе. С помощью Poastal вы можете легко ввести email-адрес, и он быстро ответит на несколько вопросов, предоставив вам важную информацию. ✨ Возможности Определить...

secfixes-tracker

Отслеживание исправлений безопасности Alpine Это веб-приложение на Flask, которое отслеживает исправления безопасности в Alpine. Используя Alpine secdb, мы в целом можем определить, какие CVE были исправлены, а какие нет. В схему отчётов secfixes будут добавлены некоторые расширения, позволяющие...

flask_appengine_redirector

flaskappengineredirector C2-редиректор на Flask для Google App Engine Простое приложение-пример на Python Flask, готовое к запуску в App Engine. Настройка среды разработки Установите SDK: https://cloud.google.com/sdk/docs/ Запустите локальный экземпляр: devappserver.py app.yaml Развертывание gclo...

log4j-honeypot-flask

log4j-honeypot-flask Ханипот для внутренней сети, предназначенный для обнаружения попыток атакующего или инсайдера просканировать вашу сеть на наличие уязвимости log4j CVE-2021-44228 Его можно установить на рабочей станции или сервере, либо запустив скрипт Python app/app.py напрямую потребуются...

cve-2021-21980-mock-server

Clippy of the Dead - среда тестирования CVE-2021-21980 и шаблон Nuclei Этот репозиторий содержит высоконадёжный шаблон Nuclei для обнаружения CVE-2021-21980 path traversal в vSphere Web Client и небольшую имитационную среду, воспроизводящую уязвимое поведение для безопасного локального...

EUVD-2026-55229

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...

CVE-2026-72577 NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...

CVE-2026-71241

CVE-2026-71241 affects a Book-Management-System built with Flask. Several endpoints (/student, /record, /books, /find_stu_book, /find_not_return_book) are missing the @login_required decorator that protects related routes (/search_student, /storage). This misconfiguration allows any unauthenticat...

Exploit for Improper Input Validation in Pyyaml

Seal Security — Python pip Example A minimal, intentionally...

CVE-2026-3962 Jcharis Machine-Learning-Web-Apps Jinja2 Template app.py render_template cross site scripting

A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5. The impacted element is the function rendertemplate of the file Machine-Learning-Web-Apps-master/Build-n-Deploy-Flask-App-with-Waypoint/app/app.py of the component Jinja2 Template...

Sensitive Information Exposure

Flask is vulnerable to Sensitive Information Exposure. The vulnerability is due to incomplete handling of the Vary: Cookie header when accessing the session object, where certain access patterns e.g., using the in operator fail to mark responses as user-specific, allowing caching proxies to store...

SQLi-Exfiltration-Lab

SQL Injection SQLi - Database Exfiltration Lab Overview...

SQLi

SQL Injection CTF Challenge - Quick Start Guide Files Over...

Simple-Flask-Deserialize-Demo-Exploit-Code

Simple-Flask-Deserialize-D...

Exploit for Code Injection in Langchain Langchain-Experimental

CVE-2024-21513 PoC for CVE-2024-21513 Original exploit documen...

Flask Weak Secret Key

Flask applications use an application key to encrypt and sign various data, including session cookies and other sensitive information. When a weak or easily guessable application key is used, it compromises the security of the entire application. Attackers can potentially decrypt sensitive data,...

[SECURITY] Fedora 39 Update: python-flask-security-too-5.1.2-3.fc39

Flask-Security quickly adds security features to your Flask application...

CVE-2022-31509

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

Cross site scripting

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....