pythonSQLInjection_PracticaGRUPO13

Simulación y Mitigación de SQL Injection 1. Descripción de...

My-POC-CVE

My-POC-CVE ⚠️ All scripts in this project are used only f...

Exploit for CVE-2026-111497

CVE-2026-111497 Assessment Toolkit Defensive assessment tools...

CLSA-2026-1792809858 python-lxml: Fix of CVE-2026-49825

CVE-2026-49825: add missing xlink:href to HTML link attributes so the Cleaner sanitizes it...

CLSA-2026-1792809744 python-lxml: Fix of CVE-2026-49825

CVE-2026-49825: add missing xlink:href to HTML link attributes so the Cleaner sanitizes it...

CLSA-2026-1792809372 python: Fix of CVE-2026-6100

CVE-2026-6100: fix a use-after-free in the bz2 and zlib modules when a decompressor object is reused after a MemoryError; the input pointer to the released caller buffer is no longer kept, so a later decompressobj.flush as done by gzip.GzipFile at EOF cannot read it...

CLSA-2026-1792809177 python-pyasn1: Fix of CVE-2026-59886

CVE-2026-59886: fix DoS via crafted ASN.1 REAL values with large exponents...

RAT-via-Telegram

RAT-via-Telegram Windows Remote Administration Tool via Telegram now in Python 3.7! | Originally created by Ritiek Why another one? The current Remote Administration Tools in the market face 2 major problems: Lack of encryption. Require port forwarding in order to control from hundreds of miles...

Important: python3.12

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

Important: python3.11

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

Important: python3.13

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

PT-2026-122968

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration...

Important: python-virtualenv

Issue Overview: virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, downloadwheel accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the...

Important: python-tornado

Issue Overview: Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory...

Important: python-tornado

Issue Overview: Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory...

Node.js 26.12.0 Binary Hash Lookup

A Python utility and CSV lookup that map Node.js executable SHA256 hashes to Node.js versions, helping identify installations affected by the Brotli decoder vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-115557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate revocation configured. Known...

PT-2026-122608

Name of the Vulnerable Software and Affected Versions Python versions prior to 3.11.18 Python versions prior to 3.12.16 Python versions prior to 3.13.18 Description The ssl module fails to distrust known compromised intermediate certificates. To address this, a denylist of compromised certificate...

Alpine Linux: CVE-2026-115557: Improper Check for Certificate Revocation

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration...

Linux Distros Unpatched Vulnerability : CVE-2026-114603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.fromheader in...