WhoDat

WhoDat Project NOTE: During development of PyDat 5, internal operations has shifted their direction leading to the retirement of the PyDat project. Although a lot of the work has been done to finalize PyDat 5's capabilities, some capabilties remain not fully tested. The WhoDat project is an...

FastJson

fastjsonexploit A one-click exploitation tool for all version...

CVE-2015-1635

️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...

PyCk

PyCk For complete details please take a look at the wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Install via docker git clone https://github.com/Naategh/PyCK.git docker build . Requirements Python 3.5 Roadmap This is an educational...

WebSocketTurboIntruder

WebSocket Turbo Intruder An extension for fuzzing WebSocket messages using custom Python code. Usage Intruder tool 1. Right-click on a WebSocket message and navigate to Extensions WebSocket Turbo Intruder Send to WebSocket Turbo Intruder. If you highlight a portion of the message before sending,...

UBUNTU-CVE-2026-115910

Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses getandstorenonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and getnonce and validateclaims verify only that...

PT-2026-127213

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.10.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description Server-side bearer authentication configured through AuthSettings with token verifier fails to...

PT-2026-127242

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, ast loggrabber executes a Python script from the world-writable /tmp directory. An attacker already authorized to open a...

PT-2026-127218

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.8.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description Certain client paths in the SDK follow HTTP redirects to different origins, which can lead to the exposu...

PT-2026-127219

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.10.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description When a connected server declares an outputSchema for a tool, the SDK client validates call tool results...

PT-2026-127225

Name of the Vulnerable Software and Affected Versions MLflow versions 3.12.0 through 3.16.x Description Third-party scorer deserialization in mlflow/genai/scorers/base.py allows the import of request-selected descendants of allowed modules rather than requiring an exact match. An attacker can use...

OpenSSH 9.7p1 regreSSHion Mitigation

An Ansible role and Python tool detect OpenSSH versions affected by the regreSSHion signal-handler race and upgrade openssh-server or apply the documented LoginGraceTime 0 workaround...

PT-2026-127745

Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. During scorer deserialization, the server accepts a request-controlled Python module path beneath one of four allowed package prefixes, imports that module, obtains a request-controlle...

XZ Utils 5.6.1 Backdoor Detection / Mitigation

An Ansible role and Python tool detect backdoored XZ Utils versions and liblzma libraries associated with CVE-2024-3094, back up affected files, upgrade supported distribution packages, and optionally restart sshd...

python-M2Crypto-doc-0.50.0-2.1 on GA media (moderate)

python-M2Crypto-doc-0.50.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:12136-1 Rating: moderate Cross-References: CVE-2026-109087 CVSS scores: CVE-2026-109087 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-109087 SUSE : 9.1...

python-Twisted-doc-26.4.0-4.1 on GA media (moderate)

python-Twisted-doc-26.4.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:12137-1 Rating: moderate Cross-References: CVE-2026-106454 CVSS scores: CVE-2026-106454 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

ALSA-2026:90759 Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-urllib3 security update

1.24.2-11 - CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser memory allocation in chunk parser Resolves: RHEL-282251...

Oracle Linux 9 : python-urllib3 (ELSA-2026-90494)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90494 advisory. - CVE-2026-97687 python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override Resolves: RHEL-282326 Tenable has extracted...

Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...