Lucene search
+L

59 matches found

Kitploit
Kitploit
•added 2026/10/02 11:22 a.m.•605 views

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/02 3:28 a.m.•120 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

6.1AI score
SaveExploits0References37
Kitploit
Kitploit
•added 2026/10/01 10:38 p.m.•29 views

rpef

Router Post-Exploitation Framework Currently, the framework includes a number of firmware image modules: 'Verified' - This module is confirmed to work and is stable. 'Unverified' - This module is believed to work or should work with little additional effort, but awaits being tested on a physical...

6AI score
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 4:17 p.m.•69 views

K15638: Python vulnerability CVE-2013-4238

Security Advisory Description The ssl.matchhostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL server...

4.3CVSS7.4AI score0.05347EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:36 a.m.•9 views

SUSE CVE-2013-4238

The ssl.matchhostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate...

5.3CVSS7.5AI score0.05347EPSS
SaveExploits1References35
Github Security Blog
Github Security Blog
•added 2022/05/13 1:41 a.m.•35 views

Plone Unauthorized Access Vulnerability

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

6.5CVSS6.9AI score0.0093EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/13 1:41 a.m.•86 views

GHSA-QC57-H2F7-P4HX Plone Unauthorized Access Vulnerability

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

7.1CVSS6.1AI score0.0093EPSS
SaveExploits0References4
OSV
OSV
•added 2019/06/25 11:21 a.m.•23 views

SUSE-RU-2019:1703-1 Security update for SUSE Manager Server 3.2

This update fixes the following issues: cobbler: - Removes string replace for textmode fix bsc1134195 py26-compat-salt: - Avoid syntax error on yumpkg module running on Python 2.6 bsc1136250 - Use ThreadPool from multiprocessing.pool to avoid leakins when calculating FQDNs - Fix usermod options f...

5.9CVSS6.2AI score0.00714EPSS
SaveExploits1References29
Veracode
Veracode
•added 2019/01/15 8:51 a.m.•45 views

Man-in-the-Middle (MitM)

python is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists as the ssl.matchhostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a \0 character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows...

5.9CVSS7.5AI score0.05347EPSS
SaveExploits5References27Affected Software1
Fedora
Fedora
•added 2018/10/30 5:47 p.m.•55 views

[SECURITY] Fedora 29 Update: python26-2.6.9-17.fc29

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

7.5CVSS4.3AI score0.10911EPSS
SaveExploits0
Fedora
Fedora
•added 2018/10/25 10:12 p.m.•53 views

[SECURITY] Fedora 28 Update: python26-2.6.9-17.fc28

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

7.5CVSS4.3AI score0.10911EPSS
SaveExploits0
Fedora
Fedora
•added 2018/10/25 10:01 p.m.•43 views

[SECURITY] Fedora 27 Update: python26-2.6.9-17.fc27

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

9.8CVSS4.3AI score0.10911EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2018/01/09 5:20 a.m.•40 views

CVE-2017-1000483

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

6.5CVSS2AI score0.0093EPSS
SaveExploits0References1
Veracode
Veracode
•added 2018/01/03 11:18 p.m.•29 views

Sandbox Escape

AccessControl is vulnerable to sandbox escapes. Attackers can use the str.format function through web templates to access private content. Note: this is only relevant for projects using Python 2.6 or greater...

6.5CVSS6.5AI score0.0093EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2018/01/03 6:29 p.m.•23 views

CVE-2017-1000483

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

6.5CVSS6.7AI score
SaveExploits0References1
NVD
NVD
•added 2018/01/03 6:29 p.m.•59 views

CVE-2017-1000483

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

6.5CVSS6.3AI score0.0093EPSS
SaveExploits0References1
OSV
OSV
•added 2018/01/03 6:29 p.m.•47 views

PYSEC-2018-72

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

6.5CVSS2AI score0.0093EPSS
SaveExploits0References2
Prion
Prion
•added 2018/01/03 6:29 p.m.•35 views

Format string

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

4CVSS6.4AI score0.0093EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/01/03 6:00 p.m.•74 views

CVE-2017-1000483

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

6.4AI score0.0093EPSS
SaveExploits0References1
Fedora
Fedora
•added 2017/12/18 8:31 p.m.•42 views

[SECURITY] Fedora 26 Update: python26-2.6.9-7.fc26

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

9.8CVSS4.3AI score0.07944EPSS
SaveExploits0
Rows per page
Query Builder