EUVD-2021-13350

Malware in sbrugna...

Py2Play Unpickles Untrusted Objects

Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes...

PT-2011-3085

Name of the Vulnerable Software and Affected Versions Google App Engine Python SDK versions prior to 1.5.4 Description A cross-site request forgery CSRF issue exists in the Interactive Console of the Google App Engine Python SDK. This allows remote attackers to hijack the authentication of...

Code injection

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...