128 matches found
CyberPanel upgrademysqlstatus Arbitrary Command Execution
import httpx import sys def getCSRFtokenclient: resp = client.get"/" return resp.cookies'csrftoken' def pwnclient, CSRFtoken, cmd: headers = "X-CSRFToken": CSRFtoken, "Content-Type":"application/json", "Referer": strclient.baseurl payload = '"statusfile":"/dev/null; %s; ","csrftoken":"%s"' % cmd,...
Exploit for Missing Authentication for Critical Function in Cyberpanel
CVE-2024-51567 Exploit Script CVE-2024-51567 is a Python...
Malicious code in faest (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f66b290465d72fc55bce4fef4200ebea68c430be84cdcbbabec5263958041781 When using this library to do any request, a "validateorigin" function is called L1320 in client.py. This method, located in utils.py, collects all request dat...
MAL-2024-12269 Malicious code in faest (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f66b290465d72fc55bce4fef4200ebea68c430be84cdcbbabec5263958041781 When using this library to do any request, a "validateorigin" function is called L1320 in client.py. This method, located in utils.py, collects all request dat...
Malicious code in qaxtest-httpx (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5840 Malicious code in qaxtest-httpx (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5235 Malicious code in httpx-advanced2 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5236 Malicious code in httpx-advanced3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in httpx-advanced2 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in httpx-advanced3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5234 Malicious code in httpx-advanced (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in httpx-advanced (PyPI)
--- -= Per source details. Do not edit below this line.=-...
OPENSUSE-SU-2024:12041-1 python310-httpx-0.22.0-3.1 on GA media
These are all security issues fixed in the python310-httpx-0.22.0-3.1 package on the GA media of openSUSE Tumbleweed...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated informa...
PT-2023-32993 · Unknown · Fastapi-Proxy-Lib
Name of the Vulnerable Software and Affected Versions: fastapi-proxy-lib version 0.0.1 Description: The issue arises from the shared use of httpx.AsyncClient across different user clients, leading to the persistent storage of cookies based on the set-cookie response header. This results in a cook...
FreeBSD : py-httpx -- input validation vulnerability (e831dd5a-7d8e-4818-aa1f-17dd495584ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e831dd5a-7d8e-4818-aa1f-17dd495584ec advisory. - Encode OSS httpx 0.23.0 is affected by improper input validation in httpx.URL, httpx.Client and some...
SUSE CVE-2021-41945
Encode OSS httpx 0.23.0 is affected by improper input validation in httpx.URL, httpx.Client and some functions using httpx.URL.copywith...
Encode OSS HTTPX Insufficient Validation
The vulnerability of theEncode OSS HTTPX library is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
[ASA-202205-1] python-httpx: access restriction bypass
Arch Linux Security Advisory ASA-202205-1 ========================================= Severity: Critical Date : 2022-05-16 CVE-ID : CVE-2021-41945 Package : python-httpx Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-2718 Summary ======= The package...
Improper Input Validation
httpx is vulnerable to improper input validation. The vulnerability exists in copywith function because the user inputs are not properly validated which allows an attacker to bypass url with wrong information...