monty

Monty Un intérprete de Python mínimo y seguro escrito en Rust para uso por parte de la IA...

pyMalleableC2

pyMalleableC2 Un intérprete de Python para perfiles Malleable C2 de Cobalt Strike que te permite analizarlos, modificarlos, construirlos programáticamente y validar su sintaxis. Soporta toda la gramática de perfiles Malleable C2 de Cobalt Strike a partir de la versión 4.3. No es compatible hacia...

CVE-2024-48990

======================================================================== CVE-2024-48990 and CVE-2024-48992 To determine whether a Python process a process that is running the Python interpreter needs to be restarted, needrestart extracts the PYTHONPATH environment variable from this process's...

CVE-2024-48990

Exploit CVE-2024-48990 Escalada de Privilegios Local en needrestart 3.8 mediante inyección de PYTHONPATH. Cómo Funciona 1. needrestart se ejecuta como root y escanea todos los procesos 2. Encuentra nuestro proceso Python, lee PYTHONPATH=/tmp/.m desde /proc/pid/environ 3. Ejecuta Python como root...

CVE-2024-48990

CVE-2024-48990 !WARNING Estos archivos e información están destinados únicamente con fines educativos. El autor no es responsable de ningún comportamiento malicioso. Toda la información proporcionada no tiene la intención de incitar ningún tipo de crimen o abuso. Descripción Qualys descubrió que...

CVE-2024-48990-PoC

CVE-2024-48990-PoC ¿Qué es needrestart y cómo funciona? Needrestart es una utilidad ampliamente utilizada en sistemas Linux viene por defecto en muchas versiones de Ubuntu que comprueba, tras una actualización de software, si algún servicio o el propio sistema necesita reiniciarse. Analizando los...

CVE-2024-48990

CVE-2024-48990 POC Overview Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable. This repository contains a...

[SECURITY] Fedora 43 Update: python3.10-3.10.21-1.fc43

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

Fedora 43 : python3.11 (2026-22170bd5c0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22170bd5c0 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Astra Linux – Vulnerability found in Python 3.11, Python 2.7, and Python 3.7

There is a medium-severity vulnerability affecting CPython. The email module does not properly quote newlines for email headers when serializing an email message, allowing for header injection when an email is serialized...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

The vulnerability of the Python programming language interpreter, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

CVE-2026-13435 Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

CVE-2026-14499

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

CVE-2026-14499

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

CVE-2026-14499

CVE-2026-14499 affects Langflow OSS 1.0.0–1.10.1. An authenticated user could execute arbitrary commands with elevated privileges due to improper validation of user-supplied input in the Python Interpreter component, resulting in OS command injection (CWE-78). IBM’s bulletin assigns CVSS v3.1 bas...

CVE-2026-14499 Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

PT-2026-60873

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An authenticated user can execute arbitrary commands with elevated privileges on the system. This occurs due to improper validation of user-supplied input within the Python Interpreter...

The vulnerability of the base64.b64decode() function in the Python programming language interpreter (CPython) allows a attacker to compromise the integrity of protected information.

The vulnerability of the base64.b64decode function in the Python programming language interpreter CPython is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...