mobileAudit

Mobile Audit Security analysis for Android APKs, from upload to actionable findings. Mobile Audit is a Django application for static application security testing and malware inspection. It extracts APK metadata, detects risky implementation patterns, organizes findings by severity, and provides a...

rainmap-lite

rainmap-lite Rainmap Lite - 모바일/태블릿/웹 브라우저에서 Nmap 스캔을 실행할 수 있게 해주는 반응형 웹 애플리케이션입니다! 이전 버전 1과 달리 Rainmap-lite는 특별한 서비스RabbitMQ, PostgreSQL, Celery, supervisor 등가 필요하지 않아 모든 서버에 쉽게 설치할 수 있습니다. Django 애플리케이션을 설치하고 cron 폴링 작업을 추가하기만 하면 새로운 스캐닝 서버를 설정할 수 있습니다. 모두를 위한 이동 중 Nmap 스캔! 1 Rainmap -...

RedTeam_toolkit

RedTeam Toolkit Note: Only legal activities should be conducted with this project. Red Team Toolkit is an Open-Source Django Offensive Web-App containing useful offensive tools used in the red-teaming together for the security specialist to identify vulnerabilities. The cybersecurity open-source...

Hale

정보 Hale는 모듈식 설계를 통해 C&C 서버에서 사용되는 새로운 프로토콜을 모니터링하는 새 모듈을 쉽게 개발할 수 있는 봇넷 명령 및 제어 모니터/스파이입니다. Hale는 많은 연결의 확장성을 처리하기 위해 Twisted로 개발된 IRC 및 HTTP 모니터를 제공합니다. 이 모듈들은 설정 가능한 프로토콜 문법과 봇 설정을 가지며 필요에 맞게 수정할 수도 있습니다. 캡처된 모든 로그와 파일은 데이터베이스에 저장되며, IRC의 경우 추적된 IP 번호도 저장됩니다. 운영자의 위치를 숨기기 위해 SOCKSv5 프록시를 통해 연결할...

mobileAudit v3.2.0

Mobile Audit Security analysis for Android APKs, from upload to actionable findings. Mobile Audit is a Django application for static application security testing and malware inspection. It extracts APK metadata, detects risky implementation patterns, organizes findings by severity, and provides a...

CVE-2026-42168

The django-pyas2 file transfer server (versions through 1.2.3 ) is vulnerable to OS command injection because the cmd_receive and cmd_send fields on the Partner model are passed directly to the os.system() function in pyas2/utils.py without proper sanitization. This flaw allows an authenticated a...

BIT-DJANGO-2026-5766 Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated Content-Length header can bypass the FILEUPLOADMAXMEMORYSIZE limit, potentially loading large files into memory and causing service degradation. As a reminder, Django expects a limit to ...

CVE-2026-33152

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, Tandoor Recipes configures Django REST Framework with BasicAuthentication as one of the default authentication backends. The AllAuth rate limiting configuration...

[SECURITY] Fedora 43 Update: python-django5-5.2.9-1.fc43

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

OESA-2025-2848 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted...

EUVD-2023-57771

Malicious code in bioql PyPI...

EUVD-2022-0081

Malicious code in bioql PyPI...

The vulnerability of the Django web application software, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Django web application framework is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

[SECURITY] Fedora 41 Update: python-django4.2-4.2.22-1.fc41

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

CVE-2023-5457

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application due to the “debug” configuration parameter set to “True” allows a remote unauthenticated attacker to access critical information and have other unspecified impacts to t...

CVE-2022-24857

django-mfa3 is a library that implements multi factor authentication for the django web framework. It achieves this by modifying the regular login view. Django however has a second login view for its admin area. This second login view was not modified, so the multi factor authentication can be...

OESA-2024-2541 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: A vulnerability was found in the Django Web Framework. The striptags and stripbtags template filter may be vulnerable to a potential denial of service DoS in cases of a large sequence ...

djangorestframework: Cross-site Scripting (XSS) via break_long_headers

A vulnerability was found in the djangorestframework package. Cross-site scripting occurs via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...

CVE-2024-41990

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

Django Debug Mode Enabled

Django is a free and open-source Python web application framework which offers a debug mode which allows developers to get additional information to help troubleshooting their applications including stack traces on error pages, exposing variables defined in your Django settings. A remote...