log4shell-finder

log4shell-finder - Scanner del file system più veloce per istanze log4j Porting Python di https://github.com/mergebase/log4j-detector log4j-detector è copyright C Copyright 2021 Mergebase Software Inc. https://mergebase.com/ Concesso in licenza GPLv3. La motivazione per portare in Python era...

detect_bluekeep.py

detectbluekeep.py Python-Skript zur Erkennung der Sicherheitslücke Bluekeep - CVE-2019-0708 - mit TLS/SSL-Unterstützung Arbeit basierend auf dem Metasploit-Modul von @zerosum0x0 https://github.com/zerosum0x0/CVE-2019-0708 RC4 übernommen von https://github.com/DavidBuchanan314/rc4 Voraussetzungen...

WinRar_ACE_exploit_CVE-2018-20250

WinRar ACE Exploit CVE-2018-20250 Dieses Programm ist ein in Python entwickeltes Skript, das die ACE-Sicherheitslücke in WinRar ausnutzt - Schwachstelle CVE-2018-20250 Es basiert auf einem früheren Projekt von WyAtu Es wird für Bildungszwecke auf dem Blog von Daniel Vispo verwendet Wie generiert...

vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 Exploração de Shell Root Remota Um Programa Simples em Python que obtém uma Shell Root Remota no Dispositivo Alvo, explorando uma Vulnerabilidade CVE-2011-2523 presente no vsFTP 2.3.4 Requisitos Linguagem Utilizada = Python3 Módulos/Pacotes utilizados: socket os pexpect paramiko getpa...

CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 SSL-Zertifikatsprüfungsumgehungs-Scanner Dieses Repository enthält ein Python-basiertes Proof-of-Concept PoC-Skript zur Erkennung von CVE-2024-40898, einer Sicherheitslücke im Apache HTTP Server, die es Angreifern ermöglicht, die SSL-Zertifikatsprüfung zu umgehen. Übersicht...

RLSA-2026:56219 Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-18503

A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...

[SECURITY] Fedora 43 Update: python3.14-3.14.7-1.fc43

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

[SECURITY] Fedora 44 Update: python3.14-3.14.7-1.fc44

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its...

SUSE SLES15: libpython2_7-1_0 / python / python-base / python-curses / etc (SUSE-SU-2026:3635-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3635-1 advisory. - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used...

UBUNTU-CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its...

CVE-2026-71308

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:09+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-cfh6-pv5c-38jv 2026-08-19 01:22:20+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtfky2ijcb2v 2026-08-19 06:44:38+00:00...

CVE-2026-68922

creationtimestamp| type| source ---|---|--- 2026-08-18 20:35:06+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8j49-mmcx-4mp5...

GHSA-PWGV-4X5Q-6M9F vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-placement-2025.2, openstack-horizon-2025.1, authentik-fips, airflow-postgres-fips, label-studio, openstack-horizon-2025.2, datahub-ingestion-fips, openstack-horizon-2025.1-fips, openstack-keystone-2025.2,...

CVE-2026-54552

The Python sh library's _uid option performs an incomplete privilege drop: child processes retain parent supplementary groups (root, docker, disk, shadow, sudo), enabling privilege escalation. Fixed in sh 2.2.4 ; SUSE/SUSE Linux Enterprise and openSUSE Leap patches (SUSE-SU-2026:3422-1, openSUSE-...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

CVE-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

EUVD-2026-60955

Pyenv provides simple Python version management. Prior to 2.8.0, isversionsafe in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, and unquoted PYENVVERSION expansion in libexec/pyenv-version-name, libexec/pyenv-which, libexec/pyenv-prefix,...