2957 matches found
Flask-Unsign
Flask Unsign Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys. For the standalone wordlist component, please visit the flask-unsign-wordlist repository. Requirements Python 3.6+ Installation To install the application, simply...
Bugs-feed
Bug's feed Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities... It's implemented as a PWA application so you can get rid of the explorer and use it as a desktop application. Navigate through different tabs and take a look to the latest bug...
HRShell
HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...
linux-explorer
Ce projet n'est plus maintenu ! Linux Expl0rer Boîte à outils de criminalistique en direct facile à utiliser pour les endpoints Linux, écrite en Python et Flask. Fonctionnalités ps Afficher la liste complète des processus Inspecter la carte mémoire du processus et récupérer facilement les chaînes...
linux-explorer
This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...
CVE-2026-11112-XXE-via-SVG-Image-Upload
CVE-2026-11112 – XXE via SVG Image Upload Program Code Python Flask + XML parser xxeuploadserver.py - Uploads SVG, renders with lxml resolving entities from flask import Flask, request from lxml import etree app = Flaskname @app.route'/upload', methods='POST' def uploadsvg: svgdata = request.data...
home_SOC_suite
Home SOC Suite — Night's Watch A personal Security Operations Center SOC built from scratch during an Anwendungsentwicklung retraining program. This suite monitors a Windows endpoint for network anomalies, resource spikes, process execution, registry changes, Security Event Log activity, schedule...
signalops
Signal OPS Полноспектральная платформа слияния сигнальной разведки из всех источников для исследований и обучения в области безопасности. Signal OPS объединяет десятки открытых источников сбора данных — базы WiFi/Bluetooth/сотовых вышек, сканеры интернет-экспозиции, индексы камер, потоки ADS-B...
CVE-2026-21994
CVE-2026-21994 Summary Oracle OKIT oci-designer-toolkit version 0.3.0 contains two critical misconfigurations that chain into an unauthenticated full takeover. A hardcoded Flask SECRETKEY exposed in the public repository allows any attacker to forge a valid admin session cookie — no credentials...
CVE-2026-22006-XSLT-Server-Side-Injection-via-xsl-script-
CVE-2026-22006 – Серверная инъекция XSLT через xsl:script Код программы Python + XSLT xsltserver.py - Applies user-supplied XSLT to XML from lxml import etree from flask import Flask, request app = Flaskname @app.route'/transform', methods='POST' def transform: xml = request.form'xml' xslt =...
CVE-2021-40903
Exploit Title: Antminer Monitor 0.5.0 - Authentication Bypass CVE: CVE-2021-40903 Date: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Exploit Author: CQR.company / Vulnz. Vendor Homepage: https://github.com/anselal/antminer-monitor,...
flask-vuln-v3
This repository does not have a README...
OPENSUSE-SU-2026:11902-1 python313-Flask-3.1.3-3.1 on GA media
These are all security issues fixed in the python313-Flask-3.1.3-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-96710
Name of the Vulnerable Software and Affected Versions dgtlmoon changedetection.io versions prior to 0.60.8 Description A flaw in the Hash Comparison component allows for a remote attack. The check password function within the changedetectionio/flask app.py file is susceptible to manipulation of t...
PT-2026-96714
Name of the Vulnerable Software and Affected Versions dgtlmoon changedetection.io versions prior to 0.60.8 Description An issue in the Authentication Hook component allows for improper authentication. A remote attacker can manipulate the check authentication function within the...
CLSA-2026-1789987201 TuxCare security update for flask (2 CVEs)
TuxCare rebuilt flask to address 2 CVEs. Fixed in 2.2.1.post2+tuxcare...
CLSA-2026-1789986625 TuxCare security update for flask (1 CVE)
TuxCare rebuilt flask to address 1 CVE. Fixed in 1.1.2.post2+tuxcare...
CLSA-2026-1789986626 TuxCare security update for flask (2 CVEs)
TuxCare rebuilt flask to address 2 CVEs. Fixed in 0.12.5.post2+tuxcare...