Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scorin...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CVE-2026-18287

Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

EUVD-2026-63435

Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2026-18287

aeon (Python time series library, aeon-toolkit/aeon) is vulnerable to code injection in the load_time_series_segmentation_benchmark method. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code, allowing an attacker to run arbitrary cod...

EUVD-2026-63434

Aeon loadhumanactivitysegmentationdatasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicio...

ida_kernelcache

idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to: Convert iOS 12's new static tagged pointers into normal kernel pointers. Parse the kernel's PRELINKINFO...

GraphSpy

GraphSpy root@kitploit: / / by RedByte1337 / / / / | | / / / \ \ \ \ \ | | \ \ \ \ | | \ \ \ | / | | | \ / \ | \ | \ /| | | /|| / / / | / /|| / /|| / विषय-सूची GraphSpy विषय-सूची त्वरित प्रारंभ स्थापना निष्पादन उपयोग विशेषताएँ रिलीज़ नोट्स आगामी विशेषताएँ प्रायोजक श्रेय त्वरित प्रारंभ...

DEBIAN-CVE-2026-49825

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

CVE-2026-49825

lxml_html_clean.Cleaner fails to strip javascript: URLs from namespaced xlink:href attributes in SVG/MathML content because lxml.html.defs.link_attrs omits that key, so the URL-scheme filter never fires. Exploitable only with safe_attrs_only=False; affects lxml ≤ 6.1.0 and lxml_html_clean ≤ 0.4.4...

CVE-2026-49825 lxml: javascript: URL bypass in Cleaner via xlink:href

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

CVE-2026-49825 lxml: javascript: URL bypass in Cleaner via xlink:href

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

ROOT-APP-PYPI-CVE-2025-67221 CVE-2025-67221 in orjson - Patched by Root

Root has patched CVE-2025-67221 in the orjson package for Root:PyPI. Multiple fixed versions available...

CVE-2025-3248

CVE-2025-3248 Introduzione Le versioni di Langflow precedenti alla 1.3.0 sono vulnerabili a un'iniezione di codice non autenticata nell'endpoint /api/v1/validate/code tramite la funzione Python exec. Questo exploit stabilisce una connessione reverse shell abusando di questa vulnerabilità. Utilizz...

EvilOSX

EvilOSX Uma ferramenta de administração remota RAT puramente em Python, pós-exploração, para macOS / OS X. Características Emula uma instância simples de terminal. Os sockets são criptografados com CSR via OpenSSL. Sem dependências Python puro. Persistência. Instalador automático: basta executar ...

stackflow

stackflow Strumento universale per lo sfruttamento di buffer overflow basato su stack Usage root@kitploit: usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send...

X-Recon

Un'utility per identificare gli input delle pagine web e condurre scansioni XSS. Caratteristiche: Scoperta di Sottodomini: Recupera i sottodomini rilevanti per il sito web target e li consolida in una whitelist. Questi sottodomini possono essere utilizzati durante il processo di scraping. Scopert...

hawk

Hawk Hawk è un'utilità di rete e di pentest che ho sviluppato per poter eseguire diversi tipi di attività utilizzando la stessa suite, invece di passare da uno strumento all'altro. Attualmente, questo script può eseguire una varietà di attività come ifconfig , ping , traceroute , scansioni delle...

inteno-exploits

Proof of concept ed exploit per dispositivi IOPSYS Questa è una raccolta di script che sfruttano varie vulnerabilità su dispositivi che eseguono IOPSYS di Inteno. Ulteriori dettagli su ogni vulnerabilità sono disponibili sul mio blog. Questi script sono stati testati solo su Linux, ma potrebbero...

DarkFox

DarkFox Remote-Access-Trojaner, erstellt mit WinRar mit einem Installer z.B. Firefox und eingebetteter Python-Reverse-Shell. Bearbeiten Sie die Datei client.py, indem Sie IP und Port des lauschenden Angriffsservers sowie IP und Port eines auf dem Angriffsrechner vorhandenen Proxys festlegen. Wenn...