Lucene search
+L

68 matches found

Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

sashay

Sashay...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CVE-2018-16858-Python

CVE-2018-16858-Python Python-Implementierung von CVE-2018-16858 Basiert auf Arbeiten von hier und hier...

9.8CVSS8.7AI score0.67321EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

pypykatz

🚩 Sponsoren Wenn Ihnen dieses Projekt gefällt, erwägen Sie den Kauf von Lizenzen von OctoPwn, unserer vollständigen Pentesting-Suite, die in Ihrem Browser läuft! Für Benachrichtigungen über neue Builds/Releases und andere Informationen besuchen Sie unseren Discord pypykatz Mimikatz-Implementierun...

5.4AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2023-27163

CVE-2023-27163 Python-Implementierung von CVE-2023-27163 Installation Gehen Sie folgendermaßen vor, um die Projektabhängigkeiten zu installieren: 1. Klonen Sie das Repository: root@kitploit: git clone https://github.com/yourusername/yourrepository.git 2. Wechseln Sie in das Projektverzeichnis:...

6.5CVSS6.1AI score0.06591EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

domain_generation_algorithms

Domain-Generierungsalgorithmen In Python neu implementierte Domain-Generierungsalgorithmen DGAs von Malware. Übersicht banjori aka MultiBanker 2, BankPatcher Links http://johannesbader.ch/2015/02/the-dga-of-banjori/ Beispieldomains earnestnessbiophysicalohax.com kwtoestnessbiophysicalohax.com...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 11:19 p.m.2 views

rdpy

RDPY Remote Desktop Protocol em Python com Twisted. RDPY é uma implementação puramente Python do protocolo Microsoft RDP Remote Desktop Protocol lado cliente e servidor. RDPY é construído sobre o motor de rede orientado a eventos Twisted. RDPY suporta a camada de segurança RDP padrão, RDP sobre S...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 10:37 p.m.1 views

pstf2

pstf^2 Passive Security Tools Fingerprinting Framework Haben Sie jemals einen einfachen, unauffälligen Umgehungsweg für mehrere Klassen von Sicherheitsprodukten gesucht? pstf^2 ausgesprochen pstf-Quadrat ist eine Implementierung eines HTTP-Servers, die passives Browser-Fingerprinting ermöglicht –...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 7:47 p.m.2 views

paramiko

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/paramiko :target: https://pypi.org/project/paramiko/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/paramiko :target: https://pypi.org/project/paramiko/ :alt:...

5.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.172 views

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 12:40 p.m.1 views

PyADRecon

Implementação em Python3 de um ADRecon melhorado para Pentesters e Equipas Azuis. ADRecon é uma ferramenta que recolhe informações sobre o MS Active Directory e gera um relatório XSLX para fornecer uma imagem holística do estado atual do ambiente AD alvo. !TIP Se és uma Equipa Vermelha, podes...

6.1AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/08/24 4:35 a.m.2 views

crypto-attacks

مقدمة تطبيقات بلغة Python للهجمات والأدوات التشفيرية. المتطلبات SageMath مع Python 3.9 PyCryptodome يمكنك التحقق من إصدار Python الخاص بـ SageMath باستخدام الأمر التالي: $ sage -python --version Python 3.9.0 root@kitploit: إذا كان إصدار SageMath Python أقدم من 3.9.0، فقد لا تعمل بعض الميزات في بع...

5.5AI score
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/06 9:46 p.m.10 views

CVE-2026-71554

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request...

5.3CVSS5.3AI score0.00443EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2026/07/17 7:17 p.m.16 views

CVE-2026-47180

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

6.5CVSS5.5AI score0.0037EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/17 7:17 p.m.7 views

UBUNTU-CVE-2026-48487

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, readcharacterstring and readstring in src/zeroconf/protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self.datalen, allowing unauthenticated hosts on th...

5.3CVSS5.9AI score0.00248EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/06/08 11:16 p.m.10 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the bz2.BZ2Decompressor objects. An attacker can cause out-of-bounds writes to a stack buffer by reusing a decompressor object after a decompression error and providing crafted input. This can result in...

8.2CVSS5.5AI score0.00428EPSS
SaveExploits0References2
PyPA
PyPA
added 2026/05/28 4:16 p.m.18 views

PYSEC-0000-CVE-2026-48524

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.getsigningkey forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no rate limiting. Since kid comes from the unverified token header, an attacker can trigger unlimited...

3.7CVSS5.8AI score0.00355EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/21 2:48 p.m.11 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in cbor2 [CVE-2026-26209]

Summary IBM Watson Speech Services Cartridge is vulnerable to adenial of service in cbor2, caused by uncontrolled recursion when decoding deeply nested CBOR structures CVE-2026-26209. Cbor2 is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the details for...

7.5CVSS7AI score0.00417EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2026/05/14 9:16 p.m.62 views

CVE-2026-44661

python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery SSRF caused by a trust-boundary inconsistency between manual discovery and tool invocation. registermanual validates the discovery URL against an HTTPS /...

4.7CVSS0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.23 views

Universal Tool Calling Protocol 安全漏洞

Universal Tool Calling Protocol is an official Python implementation of the UTCP open-source protocol. Versions prior to 1.1.3 of Universal Tool Calling Protocol contained security vulnerabilities; these vulnerabilities stemmed from the prepareenvironment method passing complete environment...

7.7CVSS5.8AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.17 views

Universal Tool Calling Protocol 代码问题漏洞

Universal Tool Calling Protocol is an official Python implementation of the UTCP open-source protocol. Versions prior to 1.1.3 of Universal Tool Calling Protocol had code vulnerabilities, which stemmed from inconsistent trust boundaries and could lead to man-in-the-middle server request forgery...

4.7CVSS5.9AI score0.00168EPSS
SaveExploits0References1
Rows per page
Query Builder