Lucene search
+L

9 matches found

NVD
NVD
added 2026/07/28 6:17 p.m.11 views

CVE-2026-54635

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

7.5CVSS0.0042EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/28 5:9 p.m.11 views

EUVD-2026-49907

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

7.5CVSS6AI score0.0042EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/28 5:9 p.m.19 views

pytonapi has a Webhook Custom Path Authentication Bypass

Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...

7.5CVSS6.1AI score0.0042EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/28 5:9 p.m.14 views

GHSA-3FCR-JVGP-7F58 pytonapi has a Webhook Custom Path Authentication Bypass

Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...

7.5CVSS6.1AI score0.0042EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2025/07/10 2:26 a.m.413 views

Exploit for CVE-2025-30208

CVE-2025-30208 Usage : ./CVE-2025-30208.sh...

5.3CVSS5.7AI score0.74998EPSS
SaveExploits28
GithubExploit
GithubExploit
added 2024/07/01 11:49 a.m.540 views

Exploit for Path Traversal in Solarwinds Serv-U

CVE-2024-28995 Automated Path Traversal & Local File Read...

8.6CVSS8.7AI score0.99614EPSS
SaveExploits9
Kitploit
Kitploit
added 2021/08/02 9:30 p.m.57 views

Domhttpx - A Google Search Engine Dorker With HTTP Toolkit Built With Python, Can Make It Easier For You To Find Many URLs/IPs At Once With Fast Time

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. Usage Flags This will display help for the tool. Here are all the switches it supports. Flag | Description | Example ---|---|--- -ip, --only-ip |...

7.4AI score
SaveExploits0References7
OSV
OSV
added 2021/03/09 7:15 p.m.8 views

CVE-2021-23352

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image, .svg or .dot functions are called, is executed by the childprocess.exec function...

9.8CVSS9.4AI score
SaveExploits0References3
Cisco
Cisco
added 2018/11/07 4:0 p.m.600 views

Cisco Prime Collaboration Assurance File Overwrite Vulnerability

A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input fiel...

6.5CVSS1.1AI score0.02538EPSS
SaveExploits0References1
Rows per page
Query Builder