Nimbo-C2

Nimbo-C2 Nimbo-C2 परिचय विशेषताएं स्थापना आसान तरीका और भी आसान तरीका उपयोग सीमाएं, चेतावनियाँ, नोट्स योगदान परिचय Nimbo-C2 एक और सरल और हल्का C2 फ्रेमवर्क है। Nimbo-C2 एजेंट x64 Windows और Linux का समर्थन करता है। यह Nim में लिखा गया है, जिसमें Windows पर .NET का कुछ उपयोग प्रक्रिया में CLR को...

Slackor

Slackor https://github.com/n00py/Slackor पर अनुरक्षित एक Golang इम्प्लांट जो Slack का उपयोग कमांड और कंट्रोल चैनल के रूप में करता है। यह प्रोजेक्ट Gcat और Twittor से प्रेरित था। यह टूल एक प्रूफ ऑफ कॉन्सेप्ट के रूप में जारी किया गया है। कोई भी Slack ऐप बनाने से पहले Slack ऐप डेवलपर नीति को पढ़ना औ...

DNS-Persist

DNS-Persist DNS-Persist — это пост-эксплуатационный агент, который использует DNS для управления и контроля C2. Серверная часть написана на Python, а агент — на C++. Это первая версия, в будущем будет добавлено больше функций и улучшений. Начало работы Автор 0x09AL - https://twitter.com/0x09al...

DNS-Shell

DNS-shell DNS-Shell एक DNS चैनल के ऊपर एक इंटरैक्टिव शेल है। सर्वर Python आधारित है और किसी भी ऑपरेटिंग सिस्टम पर चल सकता है जिसमें Python स्थापित हो, पेलोड एक एन्कोडेड PowerShell कमांड है। DNS-Shell को समझना पेलोड तब उत्पन्न होता है जब सर्वर स्क्रिप्ट को बुलाया जाता है और यह केवल nslookup का उपय...

0net

0net: باب خلفي بسيط للتحكم عن بعد في Windows مقدمة: 0net هو برنامج باب خلفي بسيط للتحكم عن بعد في Windows. العميل مكتوب بلغة C++ وتم تجميعه على vc++6.0. الخادم مكتوب بلغة Python ويمكن استخدامه عبر المنصات. المشروع قيد التطوير حاليًا... شرح المشروع التفصيلي: http://www.s0nnet.com/0net الميزات: دعم...

Astra Linux – Vulnerability in Pypy, Jython

The documentation XML-RPC server in Python, from versions 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4, has XSS vulnerabilities due to the servertitle field. This issue occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If the setservertitle function ...

CVE-2026-61433 PraisonAI before 4.6.78 Code Injection via API deployment generator

PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agentsfile configuration parameters that execute when the generated server starts or...

GHSA-X8CV-XMQ7-P8XP PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

PraisonAI AgentTeam.launch exposes unauthenticated remote agent invocation endpoints Summary PraisonAI's documented Python AgentTeam.launch / Agents.launch HTTP server starts externally reachable agent invocation endpoints without any authentication enforcement. The current implementation registe...

EUVD-2026-34037

A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blendermcp/server.py of the component ZIP File Handler. The manipulation of the argument zipfileurl results in server-side request...

CVE-2026-42545 Granian: DoS via WSGI response header panic

Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or value. The WSGI response conversion path uses .unwrap on both the header name and header value constructors, so malform...

PT-2026-26217

Name of the Vulnerable Software and Affected Versions NLTK versions 3.9.3 and prior Description NLTK Natural Language Toolkit contains a reflected cross-site scripting XSS issue in the lookup ... route of nltk.app.wordnet app. A crafted lookup URL can inject arbitrary HTML/JavaScript into the...

[SECURITY] Fedora 43 Update: python-socketio-5.14.2-1.fc43

Socket.IO is a transport protocol that enables real-time bidirectional event-based communication between clients typically, though not always, web browsers and a server. The official implementations of the client and server components are written in JavaScript. This package provides Python...

EUVD-2008-0987

Malware in sbrugna...

EUVD-2008-0989

Malware in sbrugna...

EUVD-2025-7124

Malicious code in bioql PyPI...

Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware

PoC exploit for CVE-2019-19781, a vulnerability in Citrix Application Delivery Controller ADC and Gateway. The repository, CitrixHoneypot, is a honeypot designed to detect and log scan and exploitation attempts for this vulnerability. The tool is written in Python and uses the http.server module ...

Denial Of Service (DoS)

litellm is vulnerable to Denial of Service DoS. The vulnerability is due to the use of ast.literaleval to parse user input, allowing an attacker to send specially crafted input that crashes the litellm Python server...

Exploit for Cross-site Scripting in Warfareplugins Social_Warfare

CVE-2019-9978 - Social Warfare WordPress Plugin RCE system'ca...

CVE-2024-10188

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service DoS by exploiting the use of ast.literaleval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server...

CVE-2024-10955

A Regular Expression Denial of Service ReDoS vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern r'+' to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker c...