73959 matches found
FBIntelPy
FBIntelPy: Python Facebook Intelligence OSINT Search Tool FBIntelPy is a Python-based Facebook intelligence search tool that aims to assists in generating filtered Facebook URLs. This is was created for the upcoming TraceLabs Search Party 2026.02. This was inspired by IntelTechnqiue's web-based...
CVE-2026-89274
CVE-2026-89274 — WP Recipe Maker Arbitrary Shortcode Execution Python 3 PoC scanner/exploit for CVE-2026-89274 in WP Recipe Maker. | ---|--- Plugin| wp-recipe-maker Affected| ≤ 10.8.1 Fixed in| 10.8.2+ CVSS| 9.1 Critical Auth| Unauthenticated comment submit CWE| CWE-94 Summary...
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116685
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamablehttpclient, streamablehttpclient, sseclient, ClientSessionGroup, OAuth, and createmcphttpclient client paths enable followredirects and...
CVE-2026-116686
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...
AZL-111179 CVE-2026-103995 affecting package python-py 1.11.0-1
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
halogen
Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...
CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
EUVD-2026-111385
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
CVE-2026-116694
The OpenTelemetry Python library (specifically opentelemetry-propagator-jaeger ) is vulnerable to unbounded memory allocation in the JaegerPropagator.extract() function. Prior to version 1.45.0 , the component processes inbound uberctx-* baggage values without imposing limits on the number of ent...
CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
CVE-2026-64561
CVE-2026-64561 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...
Copy-Fail-Exploit-CVE-2026-31431
Copy-Fail-Exploit-CVE-2026-31431 unning the Python Exploit 1. Execute directly python3 copyfailexp.py Compiling the C Version 1. Compile gcc copyfailexp.c -o copyfail 2. Make executable chmod +x copyfail 3. Run exploit ./copyfail su...
docf-sec-check
DocF-Sec-Check Description DocF-Sec-Check helps to make your Dockerfile commands more secure. ScreenShot Done First-level security notification in the Dockerfile TODO List Correctly detect the Dockerfile. Second-level security notification in the Dockerfile. Security notification in Docker images...
EnvVisualizer
EnvVisualizer . . . \ / \ \ / /|| | | || | / \ / /\ Y / | |/ / | \ \ | | | \ // \ \ | \ | \ / \ / | |\ | | // | || |/ /\ /| | / / /| // / |/ / /// \ | / / / / / / Parse, categorize, and visualize/proc/self/environ on compromised Linux machines. Turn a wall of fused environment variable...
CVE-2018-1235
CVE-2018-1235 A python script that tests for an exploitable instance of CVE-2018-1235. NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 Usage: ./CVE-2018-1235.py -t Target Host -r Your IP This code may be altered to actively exploit the vulnerability. Support for network scopes may be added...
CVE-2022-21500
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21500 Run bellow command to check CVE-2022-21500 -h Configurations 2. We integrated with the Telegram API to receive...
Langflow-cve-2026-33017-exploit
Langflow RCE Exploitation Framework CVE-2026-33017 · Authorized security testing for Langflow remote code execution Research & red-team tooling for validating CVE-2026-33017 against Langflow instances you are explicitly authorized to assess. Not for unauthorized use. Disclaimer This project is...