vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Apache Thrift (CVE-2026-41608, CVE-2026-66053)

Summary Multiple Denial of Service vulnerabilities in Apache Thrift CVE-2026-41608, CVE-2026-66053 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.24.0. Vulnerability Details CVEID:CVE-2026-41608 DESCRIPTION: Improper Handling of Highly...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-53537, CVE-2026-53538, CVE-2026-53539, CVE-2026-53540)

Summary Multiple Denial of Service and resource exhaustion vulnerabilities in the python-multipart parser library CVE-2026-53537, CVE-2026-53538, CVE-2026-53539, CVE-2026-53540 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32...

CVE-2026-84655

A flaw was found in Jenkins. When serializing objects as JSON and Python through its REST API, Jenkins does not properly escape map keys. This allows an attacker who can control map property names to inject arbitrary fields into JSON and Python API responses, potentially leading to information...

proofcms

ProofCMS ProofCMS is a modular Python toolkit for detecting c...

Authlib library contains a signature‑verification bypass vulnerability

Overview Authlib versions up to and including 1.7.2 contain a signature‑verification bypass in the JSON Web Signature JWS general JSON serialization handling. The JsonWebSignature.deserializejson function accepts a JWS object with an empty "signatures" array and treats the payload as successfully...

Important: python-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the...

PT-2026-108328

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is pem format in jwt/utils.py is affected because is pem format does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

WS-2026-0089

In mcp MCP Python SDK 1.9.1 through 1.29.1 and 2.0.0a1 through 2.1.1, the OAuth client mcp.client.auth did not validate the authorization server metadata issuer on every discovery path and did not bind stored or pre-provisioned client credentials to their authorization server. A malicious or...

PT-2026-108340

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.prepare key is affected because HMAC key guard only recognizes top-level public JWK forms and misses container representations. This occurs when an application allows HMAC and asymmetric...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

shellshock-cve-lab

Shellshock CVE-2014-6271 ラボ このリポジトリには、CVE-2014-6271 用の小さな CGI ラボが含まれています。GNU bash 4.2 をコンパイルし、 Python の RFC-3875 スタイルのサーバーを通じて CGI スクリプトを提供し、リクエストヘッダーを CGI 環境変数にマッピングします。 Sentinel は、このシナリオを 2026-08-27 にゼロから構築したサンドボックスラボとして再現しました。 これは意図的に脆弱性を含むラボです。隔離されたローカル環境またはサンドボックス 環境でのみ実行してください。 実行 docker...

Exploit for CVE-2026-14281

CVE-2026-14281 Checker A lightweight, Windows-friendly Python...

CVE-2026-101060

python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.calltool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal...

CVE-2026-101057

utcp-mcp the MCP plugin of python-utcp through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensuresecureurl validation that the HTTP-family plugins apply, so the HTTPS/WSS-or-loopback rule is not enforced. A call template...

CVE-2026-101058

python-utcp pip package utcp-http before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that manual is discovered from a remote, non-loopback origin. Because ensuresecureurl intentionally permits loopback HTTP for...

CVE-2026-101060 python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects

python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.calltool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal...

CVE-2026-101060 python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects

python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.calltool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal...