8 matches found
ply_exploit_rejection
Ply 3.11 漏洞利用拒绝 本项目论证应拒绝 CVE‑2025‑56005。 论点 1：概念验证无法成功完成 在本项目中，概念验证中的代码 已被复制到 main.py。 运行概念验证 要运行该漏洞利用，请确保已安装 uv 运行 root@kitploit: uv sync 这将安装 ply==3.11 作为项目依赖项。 运行 root@kitploit: uv run main.py 这将运行概念验证。结果是程序提前退出并报 AttributeError: 'function' object has no attribute 'input'。 文件 /tmp/pwned 中不包含文本...
PYSEC-2026-2324
Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/fileutils.py. The functions filtersafetarinfos and filtersafezipinfos validate archive member paths against the process current working directory CWD instead of t...
CVE-2026-34936
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough and apassthrough in praisonai accept a caller-controlled apibase parameter that is concatenated with endpoint and passed directly to httpx.Client.request when the litellm primary path raises AttributeError. No URL schem...
PYSEC-2024-186
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
UBUNTU-CVE-2024-47532
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
CVE-2024-47532 RestrictedPython information leakage via `AttributeError.obj` and the `string` module
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
