CVE-2015-4133

CVE-2015-4133 root@kitploit: usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery WordPress plugin = 3.1.3 CVE-2015-4133 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 positional arguments: YEAR wp-content/uploads sub directory MONTH...

CVE-2015-4133

CVE-2015-4133 CVE 2015-4133 - Reflex Gallery 3.1.3: मनमाना फ़ाइल अपलोड कर RCE प्राप्त करना विवरण Reflex Gallery एक Wordpress प्लगइन है जिसके 3.1.3 संस्करण में एक कमजोरी है जिसका हमलावर आसानी से शोषण कर सकते हैं ताकि मनमानी फ़ाइलें अपलोड कर सकें, उदाहरण के लिए PHP कोड ताकि रिमोट कमांड निष्पादन RCE...

PYSEC-2026-1868 reflex-dev/reflex has an Open Redirect vulnerability

Mitigation Make sure GITHUBCODESPACESPORTFORWARDINGDOMAIN is not set in a production environment. So the following is correct: assert os.getenv"GITHUBCODESPACESPORTFORWARDINGDOMAIN" is None Vulnerability Description --- Vulnerability Overview - When the GET /auth-codespace page loads in a GitHub...

PYSEC-2026-291 Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

Summary In backpropagate = 1.1.0, the optional Reflex web UI pip install backpropagateui, launched via backprop ui exposes a training control plane: dataset upload, model load, training start/stop, multi-run orchestration, GGUF export, and HuggingFace Hub push. The CLI accepts two operator-facing...

EUVD-2026-37516

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication...

CVE-2026-48797

Backpropagate is a Python library for fine-tuning large language models on a single GPU. In versions 1.1.0 and 1.1.1, the optional Reflex web UI exposes a training control plane without authentication: dataset upload, model load, training start/stop, multi-run orchestration, GGUF export, and...

PT-2026-50132

Name of the Vulnerable Software and Affected Versions Backpropagate versions 1.1.0 through 1.1.1 Description The optional Reflex web UI exposes a training control plane without authentication, despite CLI flags --auth and --share suggesting that security controls are active. The Reflex backend...

GHSA-F5P7-9FR5-8JMJ vulnerabilities

Vulnerabilities for packages: reflex...

CVE-2026-42545 vulnerabilities

Vulnerabilities for packages: reflex...

GHSA-VRG7-482J-P6F6 vulnerabilities

Vulnerabilities for packages: reflex...

CVE-2026-42544 vulnerabilities

Vulnerabilities for packages: reflex...

CVE-2026-44307 vulnerabilities

Vulnerabilities for packages: reflex, airflow...

GHSA-2H4P-VJRC-8XPQ vulnerabilities

Vulnerabilities for packages: reflex, airflow...

GHSA-VRG7-482J-P6F6 vulnerabilities

Vulnerabilities for packages: reflex, litellm...

CVE-2026-42545 vulnerabilities

Vulnerabilities for packages: reflex, litellm...

CVE-2026-42544 vulnerabilities

Vulnerabilities for packages: reflex, litellm...

GHSA-F5P7-9FR5-8JMJ vulnerabilities

Vulnerabilities for packages: reflex, litellm...

A Taxonomy of Cognitive Security

Last week, I listened to a fascinating talk by K. Melton on cognitive security, cognitive hacking, and reality pentesting. The slides from the talk are here, but--even better--Menton has a long essay laying out the basic concepts and ideas. The whole thing is important and well worth reading, and...

CVE-2025-62379

Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace endpoint automatically assigns the redirectto query parameter value directly to client-side links without any validation and triggers automatic clicks when the page loads in a...

GHSA-RFH5-C9H5-Q8JM reflex-dev/reflex has an Open Redirect vulnerability

Mitigation Make sure GITHUBCODESPACESPORTFORWARDINGDOMAIN is not set in a production environment. So the following is correct: assert os.getenv"GITHUBCODESPACESPORTFORWARDINGDOMAIN" is None Vulnerability Description --- Vulnerability Overview - When the GET /auth-codespace page loads in a GitHub...