Lucene search
+L

839 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/11 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-42304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of...

7.5CVSS5.3AI score0.00433EPSS
SaveExploits1References3
OSV
OSV
added 2026/05/05 9:12 p.m.7 views

GHSA-GRGV-6HW6-V9G4 Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

Details The twisted.names module is vulnerable to a Denial of Service DoS attack via resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can exploit this by sending a crafted TCP DNS packet containing deeply chained compression pointers. This flaw bypasses previo...

7.5CVSS5.9AI score0.00433EPSS
SaveExploits1References5
Snyk
Snyk
added 2026/05/05 9:12 p.m.10 views

Inefficient Algorithmic Complexity

Overview Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the decode function in the DNS name decompression process. An attacker can cause the server to hang and...

8.7CVSS5.8AI score0.00433EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2026/05/05 9:12 p.m.18 views

Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

Details The twisted.names module is vulnerable to a Denial of Service DoS attack via resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can exploit this by sending a crafted TCP DNS packet containing deeply chained compression pointers. This flaw bypasses previo...

7.5CVSS5.9AI score0.00433EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/05 12:00 a.m.33 views

PT-2026-37262

Name of the Vulnerable Software and Affected Versions Twisted versions prior to 26.4.0 Description The twisted.names module is susceptible to a Denial of Service DoS attack caused by resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can send a specially crafted...

7.5CVSS5.8AI score0.00433EPSS
SaveExploits3References56
Circl
Circl
added 2026/04/29 3:46 p.m.22 views

CVE-2026-42304

creationtimestamp| type| source ---|---|--- 2026-04-29 15:46:16+00:00| published-proof-of-concept| https://github.com/twisted/twisted/security/advisories/GHSA-grgv-6hw6-v9g4...

7.5CVSS4.9AI score0.00433EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/21 4:35 a.m.19 views

AZL-9340 CVE-2022-24801 for package python-twisted is not applicable

This CVE either no longer is or was never applicable...

8.1CVSS5.7AI score0.028EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.10 views

MiracleLinux 4 : python-twisted-web-8.2.0-6.AXS4 (AXSA:2020-036:02)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-036:02 advisory. python-twisted: HTTP request smuggling when presented with two Content-Length headers CVE-2020-10108 Tenable has extracted the preceding description block...

9.8CVSS8.5AI score0.03973EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.10 views

MiracleLinux 7 : python-twisted-web-12.1.0-8.el7 (AXSA:2022-3204:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-3204:01 advisory. python-twisted: possible http request smuggling CVE-2022-24801 Tenable has extracted the preceding description block directly from the MiracleLinux security...

8.1CVSS8.4AI score0.028EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.8 views

MiracleLinux 7 : python-twisted-web-12.1.0-7.el7 (AXSA:2020-025:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-025:01 advisory. python-twisted: HTTP request smuggling when presented with two Content-Length headers CVE-2020-10108 python-twisted: HTTP request smuggling when...

9.8CVSS8.5AI score0.03973EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.9 views

MiracleLinux 4 : python-twisted-web-8.2.0-5.AXS4 (AXSA:2016-689:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2016-689:01 advisory. Twisted is an event-based framework for internet applications. Twisted Web is a complete web server, aimed at hosting web applications using Twisted and Pytho...

5.3CVSS5.5AI score0.02762EPSS
SaveExploits0References2
Redos
Redos
added 2025/12/26 12:00 a.m.12 views

ROS-20251226-7303

A vulnerability in the twisted.web.util.redirectTo function of the Twisted networking framework is related to the failure to take measures to protect the structure of a web page. Exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data and compromise its...

6.1CVSS6AI score0.01176EPSS
SaveExploits0
Redos
Redos
added 2025/12/26 12:00 a.m.13 views

ROS-20251226-7302

A vulnerability in the Twisted network framework is related to the failure to take measures to protect the structure of a web page. Exploitation of the vulnerability allows a remote attacker to gain access to sensitive data and compromise its integrity...

5.4CVSS5.9AI score0.01234EPSS
SaveExploits1
Photon
Photon
added 2025/10/27 12:00 a.m.7 views

Important Photon OS Security Update - PHSA-2025-5.0-0658

Updates of 'python-Twisted' packages of Photon OS have been released...

8.3CVSS7.3AI score0.00856EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/24 3:45 p.m.14 views

Security Bulletin: Vulnerability Werkzeug, Twisted-22.10.0-py3, requests-2.32.2-py3, commons-lang-2.6, commons-fileupload-1.5, urllib3-2.2.2, jetty-server-9.4.56.v20240826 affect IBM Cloud Object Storage Systems (Oct 2025)

Summary Vulnerability with Werkzeug CVE-2024-34069, CVE-2023-46136 ,CVE-2024-49767, CVE-2024-49766 Twisted-22.10.0-py3 CVE-2024-41810, CVE-2023-46137, CVE-2024-41671, requests-2.32.2-py3 CVE-2024-47081, urllib3-2.2.2 CVE-2025-50182,CVE-2025-501810 commons-lang-2.6CVE-2025-48924,...

8.3CVSS7.5AI score0.03397EPSS
SaveExploits3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-0228

Malware in sbrugna...

9.8CVSS8.3AI score0.03973EPSS
SaveExploits1References26
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2019-0147

Malware in sbrugna...

7.4CVSS7.5AI score0.01809EPSS
SaveExploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-0229

Malware in sbrugna...

9.8CVSS7.9AI score0.03289EPSS
SaveExploits1References23
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-0227

Malware in sbrugna...

5.3CVSS5.1AI score0.02762EPSS
SaveExploits0References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-0148

Malware in sbrugna...

7.5CVSS7.4AI score0.02613EPSS
SaveExploits0References9
Rows per page
Query Builder