pyREtic

pyREtic 0.5.1 README Rich Smith - [email protected] pyREticの最新バージョンは以下で入手できます: https://github.com/MyNameIsMeerkat/pyREtic これは何ですか？ pyREtic は、Python言語プロジェクトにおける様々なリバースエンジニアリングタスクを支援する拡張可能なフレームワークです。 このツールは、リバースエンジニアがバイトコード .pyc からソースコード .py...

pycdc-studio

pycdc-studio 中文说明 pycdc / pycdas を使用してPythonバイトコードを探索し、ネイティブ逆コンパイル結果を検査し、Pyarmorのワンショット出力をインポートし、AIフォールバックで未サポートのコードオブジェクトを再試行するためのQt WidgetsデスクトップUIです。 このアプリはWindowsとLinuxのデスクトップ環境両方をサポートしています。 スクリーンショット メインワークスペース AIフォールバック できること .pyc / .pyo ファイルを直接開く...

pycdc

Decompyle++ 一款Python字节码反汇编器/反编译器 Decompyle++ 旨在将编译后的 Python 字节码转换回有效且可读的 Python 源代码。尽管其他项目也以不同程度的成功实现了这一点，但 Decompyle++ 的独特之处在于它试图支持任何 Python 版本的字节码。 Decompyle++ 包含一个字节码反汇编器 pycdas 和一个反编译器 pycdc。 顾名思义，Decompyle++ 是用 C++ 编写的。 如果您希望贡献代码，请访问 https://github.com/zrax/pycdc 在 GitHub 上 fork 我们。 构建...

LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

EUVD-2026-70226

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811

agentverus-scanner (a security scanning tool for code analysis) fails to analyze compiled Python bytecode files in companion code directories, enabling a security scanning bypass . Attackers can ship malicious __pycache__ entries alongside benign source files, causing arbitrary Python bytecode to...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809

Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...

CVE-2026-81690

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

Malicious code in node-fetch-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78aef0d64a7d761d2987d27aea462083425e5692475cd81332b7a3152c754308 On Windows, scripts/postinstall.js XOR-decodes a hardcoded C2 host node22.lunes.host:3258, authenticates with a 5-minute rolling HMAC-SHA256 token,...

cpython: CPython: Logging Bypass in Legacy .pyc File Handling

A flaw was found in CPython. This vulnerability allows a local user with low privileges to bypass security auditing mechanisms. The issue occurs because the SourcelessFileLoader component, responsible for handling older Python compiled files .pyc, does not properly trigger system audit events. Th...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging in the FileLoader class that incorrectly handles legacy SourcelessFileLoader for .pyc files. An attacker can bypass logging mechanisms sys.audit by crafting or manipulating .pyc files to avoid detection or auditing...

Fedora 43 : jupyterlab (2025-5ce0931fe3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5ce0931fe3 advisory. jupyterlab 4.4.9 fixing CVE-2025-59842. ---- Rebuilt for Python 3.14.0rc3 bytecode change Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2021-32495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Radare2 has a use-after-free vulnerability in pyc parser's getnoneobject function. Attacker can read freed memory afterwards. This will allow attackers to cause...

Security update for python310

This update for python310 fixes the following issues: CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: Drop .pyc files from docdir for reproducible builds bsc1230906. Patch Instructions: To install this SUSE update use the SUSE recommended...

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

Researchers have discovered a novel attack on the Python Package Index PyPI repository that employs compiled Python code to sidestep detection by application security tools. "It may be the first supply chain attack to take advantage of the fact that Python bytecode PYC files can be directly...

[ASA-202106-40] radare2: denial of service

Arch Linux Security Advisory ASA-202106-40 ========================================== Severity: Low Date : 2021-06-15 CVE-ID : CVE-2021-32613 Package : radare2 Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1950 Summary ======= The package radare2 before version...