962 matches found
pip-audit
pip-audit pip-audit — это инструмент для сканирования сред Python на наличие пакетов с известными уязвимостями. Он использует базу данных рекомендаций Python Packaging Advisory Database https://github.com/pypa/advisory-database через PyPI JSON API в качестве источника отчётов об уязвимостях. Этот...
heaphopper
heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopper pip install ...
tcconfig
.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...
prowler
Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...
aura
.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Аудит исходного кода и статический анализ кода Aura — это фреймворк для статического анализа,...
Pip-Intel
🌐PIP-INTEL — OSINT и инструмент киберразведки🌐 Протестировано: Kali-Linux Pip-Intel — это мощный инструмент, предназначенный для сбора OSINT разведка по открытым источникам и киберразведки. Он объединяет различные инструменты с открытым исходным кодом в единый удобный интерфейс, упрощая процессы...
AuraBorealisApp
AuraBorealis: Знаете ли вы, что содержится в ваших пакетах Python? О программе AuraBorealis — это веб-приложение для визуализации аномального и потенциально вредоносного кода в реестрах пакетов Python. Оно использует данные аудита безопасности, полученные при сканировании Python Package Index PyP...
advisory-database
Python 패키징 보안 권고 데이터베이스 이 저장소는 https://pypi.org에 게시된 패키지에 대한 보안 권고를 커뮤니티가 소유한 저장소입니다. 보안 권고는 vulns 디렉토리에 있으며 간단한 형식의 YAML 인코딩을 사용합니다. 보안 권고 기여하기 풀 리퀘스트 만들기 기존 항목은 풀 리퀘스트를 생성하여 간단히 편집할 수 있습니다. 새 항목을 도입하려면 PYSEC-0000-.yaml 이름과 일치하는 새 파일로 풀 리퀘스트를 생성하세요. 병합되면 자동화가 적절한 ID를 할당하기 위해 나중에 이를 처리합니다. YAML 파...
GHSA-6R2R-WW24-7H52 vulnerabilities
Vulnerabilities for packages: opal, datahub-ingestion, datahub-ingestion-fips, awx, mlflow, checkov...
GHSA-7JX3-JQCP-HHGC vulnerabilities
Vulnerabilities for packages: opal, awx, mlflow, checkov...
GHSA-5CC2-282F-JJQ2 vulnerabilities
Vulnerabilities for packages: mlrun, keep-fips, mlrun-fips, airflow, keep, datadog-agent-fips, datadog-agent...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1995)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1995 advisory. The incremental HTML parser html.parser.HTMLParser allows for CPUdenial-of-service through repeated unterminated markup declarations whenprocessing uncontrolled data. CVE-2026-15308 In the...
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
Malicious code in catalogai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb9ff2c71a85c2bac770a874ed3c811e963ba9b3da37417fb600678d8119991 catalogai 0.1.2 presents itself as a semantic-search / AI-catalog library but the shipped modules perform browser credential theft and...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1933)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1933 advisory. The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result ...