638 matches found
search-cve
Intelligence Engine A lean Python CLI that aggregates CVE i...
CVE-2026-45227
Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using object-graph introspection primitives. Attackers can use Python introspection techniques to recover the unrestricted...
CVE-2026-45227
Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using object-graph introspection primitives. Attackers can use Python introspection techniques to recover the unrestricted...
PT-2026-40452
Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.21 Description A sandbox escape exists in the custom Python tool executor. Authenticated workflow authors can bypass sandbox restrictions using object-graph introspection primitives. By employing Python introspection...
CVE-2026-45227: Protection Mechanism Failure
Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using object-graph introspection primitives. Attackers can use Python introspection techniques to recover the unrestricted...
Heym security vulnerabilities
Heym is an open-source AI-native workflow automation platform developed by heymrun. Versions of Heym prior to 0.0.21 contained security vulnerabilities. These vulnerabilities stemmed from sandbox escape vulnerabilities in custom Python tool executors, which could allow authenticated workflow...
Exploit for CVE-2020-1938
Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerabilit...
Exploit for Improper Authentication in Microsoft
CVE-2026-26128 !Examplehttps://github.com/jarnovandenbrink/...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruff: python3-ruff-0.15.11-1.hum1 noarch ruff-0.15.11-1.hum1 aarch64, x8664 ruff-0.15.11-1.hum1.src src...
Selenium Grid 4.11.0 Selenoid Backend Detection and Safe Session Validation Inspector
The provided Python script is a non-exploit reconnaissance and validation tool designed to identify Selenium Grid or Selenoid deployments exposed via HTTP APIs...
python-vulnerability-scanner
Python Web Vulnerability Scanner This project is a simple Pyt...
[SECURITY] Fedora 43 Update: python-pydicom-3.0.2-1.fc43
pydicom is a pure python package for working with DICOM files. It was made for inspecting and modifying DICOM data in an easy "pythonic" way. The modifications can be written again to a new file. pydicom is not a DICOM server, and is not primarily about viewing images. It is designed to let you...
AARTF---Autonomous-AI-RedTeam-Framework
AARTF AI-Driven Autonomous Security Workflow !CIhttps:/...
[SECURITY] Fedora 43 Update: python-ply-3.11-33.fc43
PLY is a straightforward lex/yacc implementation. Here is a list of its essential features: It is implemented entirely in Python. It uses LR-parsing which is reasonably efficient and well suited for larger grammars. PLY provides most of the standard lex/yacc features including support for empty...
Sentinel-Web-Scanner
Sentinel-Web-Scanner...
WindMill code injection vulnerability
WindMill is a free open-source tool developed by Lukasavicus’ individual developer. It is used to control the execution of tasks in Python. Versions of WindMill prior to 1.664.0 contained a code injection vulnerability. This vulnerability occurred when JavaScript string literals were inserted int...
Exploit for CVE-2026-3891
⚠️ CVE-2026-3891 - Test Pix for WooCommerce Security !Downl...
DEBIAN-CVE-2026-32722
Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...