CVE-2025-4476-Exploit

CVE-2025-4476-Exploit 過大な Authorization: Basic ヘッダーを含むHTTP GETリクエストを送信するための小さなPythonテストクライアントです。 このツールは、ヘッダー解析の問題（例: libsoupにおけるCVE-2025-4476のようなヌル参照/クラッシュバグ）に関するラボテストおよび研究を目的としています。不正な形式のヘッダーを含むクライアント・サーバー間のやり取りが、どのように解析エラーを引き起こすかを示すものであり、エクスプロイトフレームワークではありません。 使用方法:...

XML External Entity (XXE) Injection

Overview org.springframework.restdocs:spring-restdocs-webtestclient is a Affected versions of this package are vulnerable to XML External Entity XXE Injection. due to improperly configured XML parsing in the PrettyPrintingContentModifier and XmlContentHandler classes, in...

[SECURITY] Fedora 44 Update: python-starlette-0.52.1-2.fc44

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

[SECURITY] Fedora 43 Update: python-starlette-0.52.1-2.fc43

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

CVE-2025-60035

The vulnerability CVE-2025-60035 affects the OPC.Testclient utility in Rexroth IndraWorks prior to version 15V24. It allows an attacker to achieve Remote Code Execution by parsing a specially crafted serialized file that is opened by a user; deserialization of malicious data leads to a complete c...

[SECURITY] Fedora 42 Update: python-starlette-0.47.3-2.fc42

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

[SECURITY] Fedora 43 Update: python-starlette-0.49.1-1.fc43

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

Exploit for CVE-2025-4476

CVE-2025-4476-Exploit A small Python test client to send HTTP...

EUVD-2014-1201

Malware in sbrugna...

CVE-2014-125028

A vulnerability was found in valtech IDP Test Client and classified as problematic. Affected by this issue is some unknown functionality of the file python-flask/main.py. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The name of the patch is...

MAL-2025-3717 Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

[SECURITY] Fedora 40 Update: python-starlette-0.40.0-1.fc40

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

[SECURITY] Fedora 38 Update: python-starlette-0.27.0-1.fc38

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =EF=BF=BD=EF=BF=BD=EF=BF=BD A lightweight, low-complexity HTTP web framewor k. =EF=BF=BD=EF=BF=BD=EF=BF=BD WebSocket support...

[SECURITY] Fedora 37 Update: python-starlette-0.20.4-3.fc37

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =EF=BF=BD=EF=BF=BD=EF=BF=BD A lightweight, low-complexity HTTP web framewor k. =EF=BF=BD=EF=BF=BD=EF=BF=BD WebSocket support...

CVE-2014-125028

A vulnerability was found in valtech IDP Test Client and classified as problematic. Affected by this issue is some unknown functionality of the file python-flask/main.py. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The name of the patch is...

Cross site request forgery (csrf)

A vulnerability was found in valtech IDP Test Client and classified as problematic. Affected by this issue is some unknown functionality of the file python-flask/main.py. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The name of the patch is...

CVE-2014-125028

CVE-2014-125028 affects the valtech IDP Test Client, with the vulnerability stemming from unknown functionality in the file python-flask/main.py that enables cross-site request forgery (CSRF) . The issue may be exploitable remotely, and a patch named f1e7b3d431c8681ec46445557125890c14fa295f is re...

PT-2022-7787 · Unknown · Valtech Idp Test Client +1

Name of the Vulnerable Software and Affected Versions: valtech IDP Test Client affected versions not specified Description: A vulnerability was found in the valtech IDP Test Client, classified as problematic, and affects some unknown functionality of the file python-flask/main.py. The manipulatio...

CVE-2014-125028: Cross-Site Request Forgery (CSRF)

A vulnerability was found in valtech IDP Test Client and classified as problematic. Affected by this issue is some unknown functionality of the file python-flask/main.py. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The name of the patch is...