OESA-2026-3973 python-tornado security update

Tornado is an open source version of the scalable, non-blocking web server and tools. Security Fixes: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape....

OESA-2026-3972 python-tornado security update

Tornado is an open source version of the scalable, non-blocking web server and tools. Security Fixes: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape....

OESA-2026-3971 python-tornado security update

Tornado is an open source version of the scalable, non-blocking web server and tools. Security Fixes: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape....

OESA-2026-3969 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization...

OESA-2026-3953 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

OESA-2026-3952 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

OESA-2026-3942 pcp security update

Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. Security Fixes: A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed...

OESA-2026-3929 openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the...

OESA-2026-3922 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

OESA-2026-3910 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: GNU wget is...

OESA-2026-3878 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

OESA-2026-3877 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

OESA-2026-3872 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

Unauthenticated-CVE-2020-0796-PoC

Unauthenticated CVE-2020-0796 Proof-of-Concept All the proofs-of-concept scripts I've seen at this point have required both a username and a password. Therefore I decided to post my own PoC. It's nothing fancy, but it works. It doesn't require any additional modules and works with Python 3. Usage...

cve-2026-45185-detection-script

Scripts de detección de CVE-2026-45185 c Plataforma SECPlayground —https://www.secplayground.com Estos scripts de detección son propiedad de la Plataforma SECPlayground. Dos scripts de detección seguros. Ninguno activa el disparador closenotify-mid-BDAT, por lo que no bloquearán el daemon ni...

cve-2018-6389-php-patcher

cve-2018-6389-php-patcher Parchea la vulnerabilidad DoS de WordPress CVE-2018-6389 en PHP. 1. Coloca patcher.php en el directorio raíz de WordPress 2. Accede a yourwordpress.com/patcher.php 3. Elimina patcher.php Fuente : https://www.securemydata.fr/patch-de-la-faille-cve-2018-6389-dos-wordpress/...

CVE-2024-20137

CVE-2024-20137 Código Python para explotar la vulnerabilidad en el controlador WLAN de los SoC de MediaTek MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 Acerca del...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Mass Blue Screen Prank Test environment: win7, win2008, win2008r2 Usage: python bluekeep.py -u ./yourfile.txt -b 64 system architecture bits...

CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2024-43630-POC

CVE-2024-43630-POC Este repositorio contiene un POC que desencadena una escritura fuera de límites OOB en la pila cuando se ejecuta, provocando el bloqueo del sistema. Esta vulnerabilidad es una reliquia extremadamente interesante y poco común que demuestra las complejidades y peculiaridades de l...