plugxdecoder

plugxdecoder Einfaches Python-Skript, das PlugX-Verkehr und verschlüsselte/komprimierte Artefakte dekodiert. Pull-Requests von denen, die beitragen möchten, werden akzeptiert. Derzeit benötigt: CTypes mit ntdll, dpkt http://code.google.com/p/dpkt Getestet mit Python 2.7 unter Windows. Langfristig...

die-python

DetectItEasy-Python Native Python-3.11+-Bindings für das Detect-It-Easy von @horsicq Installation Über PIP Die einfachste und empfohlene Installation erfolgt über pip. root@kitploit: pip install die-python Mit Git root@kitploit: git clone https://github.com/elastic/die-python cd die-python...

Windows-Python-RAT

Windows-Python-RAT माइक्रोसॉफ्ट विंडोज रिमोट एडमिनिस्ट्रेटर टूल भाषा: Python कोडर: Sir.4m1R डेवलपर: Ahoora Mansouri द्वारा संचालित: The404Hacking डिजिटल सुरक्षा अनुसंधान समूह प्रारंभिक Windows-Python-RAT परीक्षण के लिए रोबोट Bot ID: @WPRATBot Token: 586363223:AAHSLdPnAE60avsT25lHjzRahtw6PhxDY...

CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5

CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5. A patched version of the package is available...

UBUNTU-CVE-2026-76222

GitPython before 3.1.58 fails to validate submodule names from .gitmod...

Security update for python-unearth (important)

openSUSE security update: security update for python-unearth ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21606-1 Rating: important References: bsc1275440 Cross-References: CVE-2026-73030 Affected Products: openSUSE Leap 16.0...

UBUNTU-CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability...

RHEL 8 : python-urwid (RHSA-2026:57637)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57637 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

UBUNTU-CVE-2026-76221

GitPython before 3.1.58 contains a config-name injection vulnerability...

CVE-2025-68645-PoC

CVE-2025-68645 Prova di concetto Avviso di Ricerca Accademica e Difensiva Questo repository contiene una prova di concetto PoC sviluppata strettamente per l'analisi accademica, la ricerca difensiva e la validazione di vulnerabilità. L'obiettivo di questo progetto è aiutare ricercatori di sicurezz...

hephaestus-server-forger

Auditor di sicurezza server per Apache, Nginx & IIS — 13 fasi di scansione, 70+ codici di verifica, guide di hardening basate su AI. Guida Rapida · Documentazione · Docker · Analisi AI ·...

CVE-2026-44901

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge in framework/wazuh/core/results.py trusts the sortcasting field in a cluster worker's JSON response. During a distributed API merge...

CVE-2025-64512-exploit

CVE-2025-64512 - pdfminer.six Esecuzione di Codice Remota RCE 📋 Descrizione Questo repository contiene un proof-of-concept per CVE-2025-64512 , una vulnerabilità critica in pdfminer.six versioni precedenti alla 20251107. La vulnerabilità consente a un attaccante di ottenere Esecuzione di Codice...

EUVD-2026-62555

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge in framework/wazuh/core/results.py trusts the sortcasting field in a cluster worker's JSON response. During a distributed API merge...

CVE-2026-44901

In Wazuh versions 4.0.0 to 4.14.5 and 5.0.0-beta2, the AffectedItemsWazuhResult.merge() method in framework/wazuh/core/results.py resolves the attacker-controlled sort_casting field through Python builtins without an allowlist. A compromised cluster worker can set sort_casting to exec and embed P...

CVE-2026-45272

MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIALAUTH key names without validating quotes or newline characters, and SettingsLoader.dumpfile in...

Aggressor-Aggregator

Aggressor Aggregator Descrizione Uno script di supporto per consolidare i repository di Aggressor Script e Beacon Object File BOF in un unico CNA per Cobalt Strike. Progettato per l'automazione in ambienti red team CTF con configurazione/distruzione frequente dei client degli operatori. Questo...

CVE-2026-45272 MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File

MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIALAUTH key names without validating quotes or newline characters, and SettingsLoader.dumpfile in...

CVE-2026-45272

MyBooks (also known as Talebook), a personal ebook management web server, is vulnerable to remote code execution in versions 3.41.2 and earlier . The root cause is a Python code injection via the AdminSettings.post handler in webserver/handlers/admin.py, which accepts SOCIAL_AUTH key names withou...

CVE-2026-45272 MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File

MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIALAUTH key names without validating quotes or newline characters, and SettingsLoader.dumpfile in...