145 matches found
SucoshScanny
Sucosh Scanny "Sucosh" — это автоматизированный сканер уязвимостей исходного кода SAST и фреймворк для оценки для Python Flask-Django и NodeJs, способный выполнять проверку кода в процессе разработки веб-приложений или анализа исходного кода. Он может обнаруживать множество уязвимостей RCE, SSTI,...
vulpy
Vulpy - Webアプリケーションセキュリティラボ Vulpyは、Python / Flask / SQLiteで開発された、2つの顔を持つWebアプリケーションです。 GOOD : セキュアな開発のベストプラクティスを念頭に置いてコーディングしようとします。 BAD : （おそらく）あなたのようにコーディングしようとします。:p 以下のコースのラボとして開発されています。 Securetiaのセキュア開発 https://www.securetia.com/cursos.html EducaciónITのセキュア開発...
Scrummage
Scrummage ВЕРСИЯ 3.9 Улучшенное управление зависимостями миграция на Poetry Более строгая проверка типов переменных. Повышенная анонимность конфигурационного файла благодаря шифрованию. Ручное редактирование конфигурационного файла теперь затруднено, и не рекомендуется редактировать его вручную...
Python Flask-Security - Open Redirect
Python Flask-Security contains an open redirect vulnerability. Existing code validates that the URL specified in the next parameter is either relative or has the same network location as the requesting URL. Certain browsers accept and fill in the blanks of possibly incomplete or malformed URLs. A...
CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1
CVE-2026-11107 – 予測可能なUUIDv1による安全でない直接オブジェクト参照（IDOR） プログラムコード（Python Flask） root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1: "name":...
flask_heroku_redirector
Flask Heroku C2 Пример Простое приложение на Python Flask, готовое к запуску на Heroku. Настройка разработки virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Развёртывание heroku create git push heroku master...
BabyShark
介绍 这是一个使用 Python 和 Flask 编写的基础 C2 通用服务器。 此代码基于 GTRS 的思路，该工具利用 Google 翻译 作为代理向受感染主机发送命令。BabyShark 项目旨在集中管理与代理的反向连接，提供一种将多种类型的连接集中在一个地方的方式。 BabyShark 不生成感染代理，但提供连接模板。 安装 root@kitploit: git clone https://github.com/danilovazb/BabyShark/ cd BabyShark mkdir database sqlite3 database/c2.db &1 $output &...
linux-explorer
このプロジェクトはメンテナンスされなくなりました！ Linux Expl0rer Python & Flaskで書かれたLinuxエンドポイント向けの使いやすいライブフォレンジックツールボックス。 機能 ps 完全なプロセスリストを表示 プロセスのメモリマップを調査し、メモリ文字列を簡単に取得 ワンクリックでプロセスメモリをダンプ 公開サービスでハッシュを自動検索 VirusTotal Intezer Analyze AlienVault OTX MalShare users ユーザーリスト find 名前/正規表現で不審なファイルを検索 netstat Whois logs syslo...
CVE-2026-46556
FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery SSRF vulnerability in getimageinfo allows any authenticated user to force the server to send HTTP requests to arbitrary internal endpoints, including cloud metadata...
Security update for python-Flask (moderate)
openSUSE security update: security update for python-flask ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20885-1 Rating: moderate References: bsc1258700 Cross-References: CVE-2026-27205 CVSS scores: CVE-2026-27205 SUSE : 6.5...
SUSE-SU-2026:22023-1 Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...
OPENSUSE-SU-2026:20885-1 Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...
[SECURITY] [DLA 4605-1] python-flask-httpauth security update
Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias May 28, 2026 https://wiki.debian.org/LTS Package : python-flask-httpauth Version : 3.2.4-3.1+deb11u1 CVE ID : CVE-2026-34531 Debian Bug : 1132581 A vulnerability was found in...
Debian dla-4605 : python-flask-httpauth-doc - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4605 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/...
CoreExploit-Final
CoreExploit 🔐 Ethical Penetration Testing Learning Platfor...
vulnerability-lab
🔐 Vulnerability Lab Buffer Overflow + SQLi ⚠️ FOR EDUCATI...
Fedora 44 : python-flask-httpauth (2026-fd53570465)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fd53570465 advisory. Update to version 4.8.1 2454342 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora: Security Advisory (FEDORA-2026-04d6f223e0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2026:20576-1 Security update for python-Flask-HTTPAuth
This update for python-Flask-HTTPAuth fixes the following issues: Changes in python-Flask-HTTPAuth: - CVE-2026-34531: Do not accept empty tokens bsc1261355...