73965 matches found
CVE-2026-116694
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-
-orange CVE-2026-32707 - PX4-Autopilot tattucan Stack Buffer Overflow DoS ââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââââ â â â âââââââ ââââââ ââââ ââââââ âââ ââââââ ââââ âââââââââââââââââââ â â âââââââââââââââââââââ âââââââ âââââââââââââââââ...
OmniScan
OmniScan Comprehensive Vulnerability Scanner OmniScan is a lightweight, multi-engine vulnerability scanner based on Python, designed for red team operations and security research. It integrates a lightweight Nuclei engine Lite and Afrog engine, and provides powerful asset collection and result...
cve-2022-26134
Installation git clone https://github.com/CJ-0107/cve-2022-26134 cd cve-2022-26134 Usage This tool is a POC written based on the pocsuite3 framework development specification. Please download pocsuite3 before use. Project address https://github.com/knownsec/pocsuite3 Environment Python 3.7+ Works...
CVE-2021-21402-Jellyfin
CVE-2021-21402-Jellyfin Arbitrary File Read This POC is for learning and communication only. I am not responsible for any consequences arising from its use. python POC.py targets.txt...
AndroRAT
Disclaimer : This software is meant for educational purposes only. I'm not responsible for any malicious use of the app. AndroRAT AndroRAT is a tool designed to give the control of the android system remotely and retrieve informations from it. Androrat is a client/server application developed in...
Dr0p1t-Framework
Not maintained currently Wait for the next version Dr0p1t-Framework Have you ever heard about trojan droppers ? In short dropper is type of malware that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks Trust me :D ...
CVE-2022-29469
CVE-2022-29469 Thanks To All SynixCyberCrimeMY Members + Muslim Hackers How To Usage ? git clone https://github.com/S4muraiMelayu1337/CVE-2022-29469/ cd CVE-2022-29469 pip3 install -r requirements.txt python3 cve.py...
GHSA-W4FH-QVV9-3V23 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server its audience. Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server. Am I...
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server its audience. Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server. Am I...
CVE-2021-34371
CVE-2021-34371 python exploit - Neo4j 3.4.18 - RMI based Remote Code Execution RCE...
GHSA-5H93-6WHR-6Q8J Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin: - custom headers set on the client for example an X-API-Key credential were sent to that origin, an...
Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin: - custom headers set on the client for example an X-API-Key credential were sent to that origin, an...
Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
Summary In affected versions, when a connected MCP server declared an outputSchema for a tool, the SDK's client validated each calltool result with jsonschema's default resolver, which fetches any $ref it cannot resolve locally by opening the URL. A server could therefore put an http://, https://...
GHSA-RWRF-2PQF-9J8J Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
Summary In affected versions, when a connected MCP server declared an outputSchema for a tool, the SDK's client validated each calltool result with jsonschema's default resolver, which fetches any $ref it cannot resolve locally by opening the URL. A server could therefore put an http://, https://...
CVE-2022-21371
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram API to receive...
PhpMyAdmin
This is an old perl scanner I found for the php my admin exploit that's from 2009. I got bored and figured I would practice perl and learn a bit about an older language and convert it to python. This is for educational purposes mostly because this exploit being well over a decade old I wouldn't...
CVE-2022-1388
CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...
bbot-ui
BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features đ Zero Setup - Single self-installing file, no manual dependencies đ´ Live Refresh - Auto-updates while scans are running with accurate status detection đŻ Smart Status Detection - Accurately...