73975 matches found
msgspec-python313-pre
msgspec-python313-pre CVE-2025-27607 fix...
Struts2-045-Exp
Struts2-045-Exp Struts2-045 exploitation script For testing purposes only usage:python3 struts2-045-exp.py url cmd...
CVE-2007-4559
PoC or Exploit for CVE-2007-4559 A malicious TAR archive can include file paths like ../../../../etc/passwd, which try to "climb up" out of the intended extraction folder. If a Python script uses tarfile.extract or extractall without checking the file paths, it will unpack files to those location...
AnonHik
AnonHik Python script to get image from Hikvision camera with CVE-2017-7921 vulnerability Demo: Alt Text...
CVE-2026-59726
CVE-2026-59726 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. β‘ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...
CVE-2023-24329-PoC
CVE-2023-24329-PoC A short and inforamtional PoC on CVE-2023-24329: Python urllib parsing flaw. git clone https://github.com/H4R335HR/CVE-2023-24329-PoC cd CVE-2023-24329-PoC python3 CVE-2023-24329-PoC.py Based on research by Yebo Cao - https://pointernull.com/security/python-url-parse-problem.ht...
CVE-2021-4044
SSL Checker Script This repository contains a Python script that checks the OpenSSL version on your system and tests SSL/TLS connections to a user-provided website. The script is designed to identify whether the system is affected by CVE-2021-4044 and to test the handling of SSL errors during the...
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116686
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...
CVE-2026-116685
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamablehttpclient, streamablehttpclient, sseclient, ClientSessionGroup, OAuth, and createmcphttpclient client paths enable followredirects and...
AZL-111179 CVE-2026-103995 affecting package python-py 1.11.0-1
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
halogen
Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...
CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
CVE-2026-116694
The OpenTelemetry Python library (specifically opentelemetry-propagator-jaeger ) is vulnerable to unbounded memory allocation in the JaegerPropagator.extract() function. Prior to version 1.45.0 , the component processes inbound uberctx-* baggage values without imposing limits on the number of ent...
CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
EUVD-2026-111385
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without entry, per-entry byte, or total-byte limits. Services that enable the optional Jaeger propagator c...
CVE-2018-1235
CVE-2018-1235 A python script that tests for an exploitable instance of CVE-2018-1235. NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 Usage: ./CVE-2018-1235.py -t Target Host -r Your IP This code may be altered to actively exploit the vulnerability. Support for network scopes may be added...
CVE-2022-21500
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21500 Run bellow command to check CVE-2022-21500 -h Configurations 2. We integrated with the Telegram API to receive...