aparoid

Aparoid Aparoid es un framework diseñado para el análisis de aplicaciones Android. Ofrece un conjunto automatizado de herramientas para descubrir vulnerabilidades y otros riesgos en aplicaciones móviles. Está construido usando el framework Flask y ofrece una GUI web para subir archivos APK y...

Nmap-API

API de Nmap Usa python3.10, Debian, python-Nmap y el framework flask para crear una API de Nmap que puede realizar escaneos con buena velocidad en línea y es fácil de desplegar. Esta es una implementación para nuestro proyecto universitario PCL que aún está en desarrollo y se actualiza...

XSS-Catcher

XSS Catcher Un framework de detección de XSS ciego y captura de datos XSS que funciona con Flask, y . XSS Catcher es una herramienta intuitiva que automatiza ataques de Cross-Site Scripting XSS ciego y la recopilación de datos, incluyendo capturas de pantalla. Cuenta con un generador de payloads...

fb-phisher-python

Phishing de Facebook Autor original : Arslan Mughal POR : arjunindia repositorio original : https://github.com/arslanmughal5566/facebookphishing Acerca del script : Con este script puedes realizar el robo de credenciales de inicio de sesión de Facebook con algunas habilidades de ingeniería social...

GHSA-MCVF-JXCW-VJ73 CKAN has CSRF exemption primed by anonymous requests

Views can be marked as exempt from CSRF protection Access to the views via tokens or unauthenticated requests marked the endpoint as not requiring CSRF protection. The marking was a member variable in flask-wtf.csrf.CSRFProtect, which was stored as a module level variable in the flaskapp...

SafeVault

SafeVault - Security and Authentication Capstone Project A pr...

Security Bulletin: IBM Maximo Application Suite uses flask-3.1.2-py3-none-any.whl which is vulnerable to CVE-2026-27205.

Summary IBM Maximo Application Suite uses flask-3.1.2-py3-none-any.whl which is vulnerable to CVE-2026-27205. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-5889 DESCRIPTION: A vulnerability was found in juliangruber...

CVE-2026-34531

Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token protected resource without passing a token, or passing an empty token, Flask-HTTPAuth would invoke the application's token...

CVE-2026-34531

CVE-2026-34531 affects Flask-HTTPAuth (Python package) and concerns the token verification callback receiving an empty string when a request targets a token-protected resource without a token or with an empty token. This could allow authentication against any user whose token is an empty string. ...

GHSA-7432-952R-CW78 Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle

Executive Summary A cryptographic padding oracle vulnerability was identified in the Authlib Python library concerning the implementation of the JSON Web Encryption JWE RSA15 key management algorithm. Authlib registers RSA15 in its default algorithm registry without requiring explicit opt-in,...

Web_vuln_scanner

Webvulnscanner A simple web-based vulnerabil...

SUSE CVE-2026-27205

Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...

CVE-2026-27205

Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...

PYSEC-2026-2151

Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...

UBUNTU-CVE-2026-27205

Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...

Snitch__Scan

PoC exploit for XSS Vulnerability Scanner. This tool is designed...

OWASP-Lite-Scanner

OWASP-Lite-Scanner OWASP-Lite Scanner: A Flask-ba...

XSS-Scanner-cross-site-scanning-

Basic XSS Lab Local — Flask + CLI Scanner Quick start W...

EUVD-2023-0080

Malicious code in bioql PyPI...

ROS-20250912-09

Vulnerability in the implementation of the CORS mechanism of the Python PyPi language software product repository is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information. remotely to disclose protected...