145 matches found
SucoshScanny
Sucosh Scanny "Sucosh" est un scanner automatisé de vulnérabilités de code source SAST et un framework d'évaluation pour Python Flask-Django et NodeJs, capable d'effectuer une revue de code dans les processus de développement d'applications Web ou d'analyse de code source. Il peut détecter de...
vulpy
Vulpy - Laboratoire de Sécurité des Applications Web Vulpy est une application web développée en Python / Flask / SQLite qui a deux facettes. BONNE : Tente de coder en respectant les bonnes pratiques de développement sécurisé. MAUVAISE : Tente de coder comme peut-être vous. :p Elle est développée...
Scrummage
Scrummage VERSION 3.9 Gestion améliorée des dépendances migration vers Poetry Vérification de type plus stricte des variables. Anonymisation améliorée du fichier de configuration via le chiffrement. La modification manuelle du fichier de configuration est désormais difficile et il est conseillé d...
Python Flask-Security - Open Redirect
Python Flask-Security contains an open redirect vulnerability. Existing code validates that the URL specified in the next parameter is either relative or has the same network location as the requesting URL. Certain browsers accept and fill in the blanks of possibly incomplete or malformed URLs. A...
CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1
CVE-2026-11107 – Небезопасная прямая ссылка на объект с предсказуемым UUIDv1 Код программы Python Flask root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users =...
flask_heroku_redirector
Flask Heroku C2 Пример Простое приложение на Python Flask, готовое к запуску на Heroku. Настройка разработки virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Развёртывание heroku create git push heroku master...
BabyShark
介绍 这是一个使用 Python 和 Flask 编写的基础 C2 通用服务器。 此代码基于 GTRS 的思路，该工具利用 Google 翻译 作为代理向受感染主机发送命令。BabyShark 项目旨在集中管理与代理的反向连接，提供一种将多种类型的连接集中在一个地方的方式。 BabyShark 不生成感染代理，但提供连接模板。 安装 root@kitploit: git clone https://github.com/danilovazb/BabyShark/ cd BabyShark mkdir database sqlite3 database/c2.db &1 $output &...
linux-explorer
Ce projet n'est plus maintenu ! Linux Expl0rer Boîte à outils de criminalistique en direct facile à utiliser pour les endpoints Linux, écrite en Python et Flask. Fonctionnalités ps Afficher la liste complète des processus Inspecter la carte mémoire du processus et récupérer facilement les chaînes...
CVE-2026-46556
FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery SSRF vulnerability in getimageinfo allows any authenticated user to force the server to send HTTP requests to arbitrary internal endpoints, including cloud metadata...
Security update for python-Flask (moderate)
openSUSE security update: security update for python-flask ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20885-1 Rating: moderate References: bsc1258700 Cross-References: CVE-2026-27205 CVSS scores: CVE-2026-27205 SUSE : 6.5...
SUSE-SU-2026:22023-1 Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...
OPENSUSE-SU-2026:20885-1 Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...
[SECURITY] [DLA 4605-1] python-flask-httpauth security update
Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias May 28, 2026 https://wiki.debian.org/LTS Package : python-flask-httpauth Version : 3.2.4-3.1+deb11u1 CVE ID : CVE-2026-34531 Debian Bug : 1132581 A vulnerability was found in...
Debian dla-4605 : python-flask-httpauth-doc - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4605 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/...
CoreExploit-Final
CoreExploit 🔐 Ethical Penetration Testing Learning Platfor...
vulnerability-lab
🔐 Vulnerability Lab Buffer Overflow + SQLi ⚠️ FOR EDUCATI...
Fedora 44 : python-flask-httpauth (2026-fd53570465)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fd53570465 advisory. Update to version 4.8.1 2454342 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora: Security Advisory (FEDORA-2026-04d6f223e0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2026:20576-1 Security update for python-Flask-HTTPAuth
This update for python-Flask-HTTPAuth fixes the following issues: Changes in python-Flask-HTTPAuth: - CVE-2026-34531: Do not accept empty tokens bsc1261355...