73978 matches found
CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2019-5029
CVE-2019-5029 This is a Python script PoC for CVE-2019-5029. It is a RCE for Exhibitor Web UI 1.7.1. How to use Clone this repo git clone https://github.com/yZ1337/CVE-2019-5029.git Execute as follows python3 CVE-2019-5029.py Make sure the request inside the script is the same as the request of t...
CVE-2019-9053-Fixed
The user assumes all responsibility for any action taken using this tool. If these terms are not acceptable to you, please do not use this tool. Use it only in environments where you are permitted to perform pentesting activities Bug fixes for the CVE-2019-9053 exploit Some bug fixes for the...
Zerodapi
Zerodai Documentation Start! pip install zerodai==0.0.0.20 export zerodapikey="YOURAPIKEY" Get your api key https://zerodai.com Simple Conversational Chat - No memory from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey" messages = while True: prompt = input" " if prompt ==...
log4j-urlscanner
log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...
CVE-2026-116579
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompressmessagedata in compressbrotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete...
cve-2023-37635
CVE-2023-37635 - Exploitation Guide Installation & Setup 1️⃣ Install Dependencies pip install -r requirements.txt 2️⃣ Run the Exploit With a proxy: python brutForc.py Without a proxy: python brutForc.py -n Notes: Replace with the target URL. The -n flag disables proxy usage. ⚠️ Disclaimer : This...
pysho
pysho Python based tool to perform Shodan queries via the Shodan API Get the tool: git clone https://github.com/Kr0ff/pysho python -m pip install -r requirements.txt chmod +x pysho.py ./pysho Example usage: Perform a check on your Shodan API key python pysho.py --info Perform search for a service...
-CVE-2019-9053
CVE-2019-9053 This repository contains the corrected code for CVE: 2019-9053 How to use this? Inside the terminal you can deploy this by python3 exploit2019.py this will ask you to add the URL etc.. after it starts running u can follow those steps to run it and get the Username and Password...
CVE-2010-3600-PythonHackOracle11gR2
This repository does not have a README...
heartbleed
heartbleed Execute the heartbleed exploit python heartbleed.py 127.0.0.1 -p 8443 Setup and run server Install docker and run the daemon Install the docker container with docker pull hmlio/vaas-cve-2014-0160 Run the container with a port mapping docker run -d -p 8443:443 hmlio/vaas-cve-2014-0160...
CVE-2024-20767
Proof of Concept script for CVE-2024-20767 Overview get-the-files.py is a Python script that exploits a vulnerability in Adobe ColdFusion Servers CVE-2024-20767 to read files from the server. The script is based on a method outlined at https://jeva.cc/2973.html. Disclaimer This script is provided...
CVE-2021-46422
CVE-2021-46422 Installation 下载py,使用cmd打开 Usage poc python3 CVE-2021-46422.py -u url exp python3 tpexp.py -u http://www.xxx.com -c id Disclaimer🧐 This tool is only intended for legally authorized enterprise security construction activities. If you need to test the usability of this tool, please se...
CVE-2024-29296-PoC
Portainer CVE-2024-29296 Proof of Concept Script Requirements python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Usage python3 main.py Enter Target URL: Enter Username List: Credits Reported by: https://github.com/ThaySolis/CVE-2024-29296...
CVE-2024-24919
CVE-2024-24919 Name: CVE-2024-24919 Scanner Author: 0x.ans Contact: Instagram: 0x.ans / / | / / / / / | |/ / /-2024-24919 / |// 0xans Usage: python3 scanner.py -x TARGET -w WORDLIST Tool Description: The CVE-2024-24919 Scanner is a Python tool designed to find potential CVE-2024-24919...
SUSE CVE-2026-114618
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...
SUSE CVE-2026-115557
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration...
SUSE CVE-2026-115910
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses getandstorenonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and getnonce and validateclaims verify only that...