[SECURITY] Fedora 24 Update: python-peewee-2.8.5-2.fc24

A small, expressive ORM written in python with built-in support for sqlite, mysql and postgresql and special extensions like hstore. For flask integration, including an admin interface and RESTful API, check out flask-peewee...

WMD (Weapon of Mass Destruction) - Python framework for IT security tools

This is a python tool with a collection of IT security software. The software is incapsulated in "modules". The modules does consist of pure python code and/or external third programs. Main functions 1 To use a module, run the command "use modulecall", e.g. "use apsniff", to activate the module. ...

Cross-Site Scripting (XSS)

flask-admin is vulnerable to cross-site scripting XSS attacks. This is because it does not escape html in columneditablelist values...

flask-oidc open redirect vulnerability

flask-oidc is a library for supporting OpenID connections to flask. An open redirection vulnerability exists in flask-oidc 0.1.2 and earlier versions, which can be exploited by an attacker to redirect a user to an arbitrary website and execute a phishing attack...

PYSEC-2016-25

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

Open redirect

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

CVE-2016-1000001

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

CVE-2016-1000001

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

PYSEC-2016-25

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

CVE-2016-1000001

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

CVE-2016-1000001

The CVE-2016-1000001 entry concerns the flask-oidc library, where versions 0.1.2 and earlier are vulnerable to an open redirect. The vulnerability enables a misused redirect to an arbitrary URL, potentially facilitating phishing or credential-stealing scenarios for users who interact with a craft...

CVE-2016-1000001

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

PT-2016-4490

Name of the Vulnerable Software and Affected Versions flask-oidc versions 0.1.2 and earlier Description The issue is related to an open redirect. Recommendations For versions 0.1.2 and earlier, update to a version later than 0.1.2 to resolve the issue...

CVE-2016-1000001: URL Redirection to Untrusted Site

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

Exploit for HTTP Response Splitting in Python

CVE-2016-5699-poc PoC code of CVE-2016-...

Uber: uber.com may RCE by Flask Jinja2 Template Injection

Hi, Uber Security Team I found an RCE in rider.uber.com. First, if you change your profile name to '7'7 , and you will receive a mail "Your Uber account information has been updated" sent by [email protected] And in mail body, you can see your name become '7777777' This is a vulnerability about...

openstack-ironic-discoverd: potential remote code execution with debug mode enabled

It was discovered that enabling debug mode in openstack-ironic-discoverd also enabled debug mode in the underlying Flask framework. If errors were encountered while Flask was in debug mode, a user experiencing an error might be able to access the debug console effectively, a command shell...

Important: Red Hat Security Advisory: openstack-ironic-discoverd security update

Updated openstack-ironic-discoverd packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2015-5306

OpenStack Ironic Inspector aka ironic-inspector or ironic-discoverd, when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error...

CVE-2015-5306

OpenStack Ironic Inspector aka ironic-inspector or ironic-discoverd, when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error...