27 matches found
flask_appengine_redirector
flaskappengineredirector Google App Engine Flask C2 리디렉터 App Engine에서 실행할 준비가 된 간단한 Python Flask 예제 애플리케이션입니다. 개발 설정 SDK 설치: https://cloud.google.com/sdk/docs/ 개발 인스턴스 실행: devappserver.py app.yaml 배포 gcloud app create gcloud app deploy 설정 디버그 출력을 로그 콘센트로 설정 기본값: True: 전달 C2 도메인 설정 리디렉션 대상: 리디렉터 도...
secfixes-tracker
Alpine Security Fix Tracker Alpine의 보안 수정 사항을 추적하는 Flask 웹 애플리케이션입니다. Alpine secdb를 사용하면 어떤 CVE가 수정되었고 수정되지 않았는지 일반적으로 추론할 수 있습니다. 패키지 관리자가 오탐false positive을 표시할 수 있도록 secfixes 보고 스키마에 일부 확장이 추가될 예정입니다. 가까운 시일 내에 상태 변경 사항은 엔진이 처리할 때 보안 공지 목록에 보고될 것입니다. 설정 일반적인 방식으로 virtualenv를 생성한 다음 pip3 install...
poastal
Poastal - 이메일 OSINT 도구 Poastal 은 모든 이메일 주소에 대한 유용한 정보를 제공하는 이메일 OSINT 도구입니다. Poastal을 사용하면 이메일 주소를 쉽게 입력할 수 있으며, 몇 가지 질문에 신속하게 답변하여 중요한 정보를 제공합니다. ✨ 기능 해당 이메일을 가진 사람의 이름 확인. 이메일이 전달 가능한지 확인. 이메일이 일회용인지 확인. 이메일이 스팸으로 간주되는지 식별. Facebook, Twitter, Snapchat, Parler, Rumble, MeWe, Imgur, Adobe,...
log4j-honeypot-flask
log4j-honeypot-flask Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228 This can be installed on a workstation or server, either by running the Python app/app.py script directly you'll need python3, Flask, and Requests or as a Dock...
cve-2021-21980-mock-server
Clippy of the Dead - CVE-2021-21980 testing environment and Nuclei template This repository contains a high-confidence Nuclei template to detect CVE-2021-21980 vSphere Web Client path traversal and a small mock environment that reproduces the vulnerable behavior for safe local testing. Files:...
EUVD-2026-55229
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...
CVE-2026-72577 NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...
CVE-2026-72577: Missing Authentication for Critical Function
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...
PT-2026-69461
Name of the Vulnerable Software and Affected Versions NASA fprime-gds versions prior to 3.4.4 Description An unauthenticated remote attacker can achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprime...
CVE-2026-71241
CVE-2026-71241 affects a Book-Management-System built with Flask. Several endpoints (/student, /record, /books, /find_stu_book, /find_not_return_book) are missing the @login_required decorator that protects related routes (/search_student, /storage). This misconfiguration allows any unauthenticat...
Exploit for Improper Input Validation in Google Chrome
--- CVE-2026-11112 – XXE via SVG Image Upload Program C...
Exploit for Improper Input Validation in Pyyaml
Seal Security — Python pip Example A minimal, intentionally...
CVE-2026-3962 Jcharis Machine-Learning-Web-Apps Jinja2 Template app.py render_template cross site scripting
A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5. The impacted element is the function rendertemplate of the file Machine-Learning-Web-Apps-master/Build-n-Deploy-Flask-App-with-Waypoint/app/app.py of the component Jinja2 Template...
Sensitive Information Exposure
Flask is vulnerable to Sensitive Information Exposure. The vulnerability is due to incomplete handling of the Vary: Cookie header when accessing the session object, where certain access patterns e.g., using the in operator fail to mark responses as user-specific, allowing caching proxies to store...
SQLi-Exfiltration-Lab
SQL Injection SQLi - Database Exfiltration Lab Overview...
SQLi
SQL Injection CTF Challenge - Quick Start Guide Files Over...
Simple-Flask-Deserialize-Demo-Exploit-Code
Simple-Flask-Deserialize-D...
Exploit for Code Injection in Langchain Langchain-Experimental
CVE-2024-21513 PoC for CVE-2024-21513 Original exploit documen...
Flask Weak Secret Key
Flask applications use an application key to encrypt and sign various data, including session cookies and other sensitive information. When a weak or easily guessable application key is used, it compromises the security of the entire application. Attackers can potentially decrypt sensitive data,...
