pycdc-studio

pycdc-studio English README 一个基于 Qt Widgets 的桌面图形界面，用来配合 pycdc / pycdas 浏览 Python 字节码、查看原生反编译结果、导入 Pyarmor oneshot 输出，并在遇到不支持的 code object 时使用 AI 做兜底重建。 当前支持 Windows 和 Linux 桌面环境。 界面预览 主工作区 设置页 AI 重建 功能 直接打开 .pyc / .pyo 支持把文件夹拖进窗口，递归扫描其中的字节码文件 支持通过 oneshot 流程导入 Pyarmor 混淆项目 多文件会一起显示在左侧树里...

pycdc

Decompyle++ 一款Python字节码反汇编器/反编译器 Decompyle++ 旨在将编译后的 Python 字节码转换回有效且可读的 Python 源代码。尽管其他项目也以不同程度的成功实现了这一点，但 Decompyle++ 的独特之处在于它试图支持任何 Python 版本的字节码。 Decompyle++ 包含一个字节码反汇编器 pycdas 和一个反编译器 pycdc。 顾名思义，Decompyle++ 是用 C++ 编写的。 如果您希望贡献代码，请访问 https://github.com/zrax/pycdc 在 GitHub 上 fork 我们。 构建...

pyREtic

pyREtic 0.5.1 自述文件 Rich Smith - [email protected] pyREtic 最新版本可在以下地址找到：https://github.com/MyNameIsMeerkat/pyREtic 它是什么？ pyREtic 是一个可扩展的框架，旨在帮助执行各种针对 Python 语言项目的逆向工程任务。 它帮助逆向工程师从字节码（.pyc）恢复源代码（.py），特别是在被逆向的代码已采取手段试图阻止使用标准工具集进行反编译的情况下。 它由三个主要部分组成： REpdb ：一个以逆向工程为中心的 pdb...

LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

EUVD-2026-70226

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811

agentverus-scanner (a security scanning tool for code analysis) fails to analyze compiled Python bytecode files in companion code directories, enabling a security scanning bypass . Attackers can ship malicious __pycache__ entries alongside benign source files, causing arbitrary Python bytecode to...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809

Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...

CVE-2026-84809: Protection Mechanism Failure

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84811: Protection Mechanism Failure

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-81690

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

Malicious code in node-fetch-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78aef0d64a7d761d2987d27aea462083425e5692475cd81332b7a3152c754308 On Windows, scripts/postinstall.js XOR-decodes a hardcoded C2 host node22.lunes.host:3258, authenticates with a 5-minute rolling HMAC-SHA256 token,...

cpython: CPython: Logging Bypass in Legacy .pyc File Handling

A flaw was found in CPython. This vulnerability allows a local user with low privileges to bypass security auditing mechanisms. The issue occurs because the SourcelessFileLoader component, responsible for handling older Python compiled files .pyc, does not properly trigger system audit events. Th...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging in the FileLoader class that incorrectly handles legacy SourcelessFileLoader for .pyc files. An attacker can bypass logging mechanisms sys.audit by crafting or manipulating .pyc files to avoid detection or auditing...

Fedora 43 : jupyterlab (2025-5ce0931fe3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5ce0931fe3 advisory. jupyterlab 4.4.9 fixing CVE-2025-59842. ---- Rebuilt for Python 3.14.0rc3 bytecode change Tenable has extracted the preceding description block...