74580 matches found
AZL-109532 CVE-2026-111450 affecting package python-wheel 0.43.0-2
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request...
AZL-109535 CVE-2026-111444 affecting package python-wheel 0.43.0-2
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled NOBACKSLASHESCAPES absent when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings th...
ctf-tools
ctftools A toolkit for binary exploitation in CTFs. Every too...
-SSH-Enum-CVE-2018-15473
🛡️ OpenSSH User Enumeration Tool CVE-2018-15473 User enumeration tool for OpenSSH versions below 7.7. This version has been ported to Python 3 and optimized for maximum stability in HackTheBox and TryHackMe labs. ✨ Key improvements Compatibility: Works with paramiko 3.x fixes the property object i...
CVE-2026-111391: Improper Neutralization of Directives in Dynamically Evaluated Code
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...
PT-2026-115584
Name of the Vulnerable Software and Affected Versions SGLang versions 0.5.10 through 0.5.22 Description A code injection issue exists in the evaluate filter function. Remote attackers can execute Python code by escaping the eval sandbox using re.search globals . This is possible by sending a...
Oracle Linux 8 : python36:3.6 (ELSA-2026-82858)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82858 advisory. - Fix CVE-2021-27291: ReDos via crafted malicious input Resolves: rhbz1943459 rhbz1943460 python-pymongo - Backport CVE-2026-88029 python-PyMySQL - Security fi...
UBUNTU-CVE-2026-62322
Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-controlled LINE account and induce a victim to visit the resultin...
From Billion-Scale to Million-Scale Language Models: Operational Capabilities for Embedded Post-Exploitation
Small Language Models SLMs are increasingly attractive for resource-constrained environments due to their low computational footprint. These characteristics also make them candidates for future autonomous malware, where connectivity, latency, privacy, or operational constraints may preclude...
Linux Distros Unpatched Vulnerability : CVE-2026-62322
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the...
EUVD-2025-30319
Rejected reason: Not used...
EUVD-2025-30315
Rejected reason: Not used...
EUVD-2024-55021
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-30321
Rejected reason: Not used...
EUVD-2025-30318
Rejected reason: Not used...
EUVD-2025-30317
Rejected reason: Not used...
EUVD-2025-30316
Rejected reason: Not used...
EUVD-2025-30320
Rejected reason: Not used...