3575 matches found
CVE-2026-76460
CVE-2026-76460 This project demonstrates a mock authentication-bypass scenario inspired by CVE-2026-76460. The lab is intentionally educational and safe: it is a local Flask API that simulates the vulnerable and patched behavior without targeting real systems. Goal The application shows how a...
android_poc_tester
androidenv — Dockerized Android CTF POC Runner A platform fo...
amundsen-metadata (>=1.0.18, <=2.5.4), amundsen-search (>=2.4.1, <=2.5.1) +8 more potentially affected by CVE-2026-102598 via werkzeug (0.15.3)
werkzeug PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =1.0.18, =2.4.1, =0.0.1, =0.0.6, =0.9.94, =0.0.1, =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2026-102598 Source advisory:...
canonicalwebteam-flask-base (>=0.3.3, <=0.9.3), flexget (>=2.21.21, <=3.1.104) +4 more potentially affected by CVE-2026-102598 via werkzeug (0.15.6)
werkzeug PYPI version 0.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - canonicalwebteam-flask-base =0.3.3, =2.21.21, =0.1.0a27, =0.1.0, =0.15.0, =0.2.0, =0.2.1 Source cves: CVE-2026-102598 Source advisory:...
CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1
CVE-2026-11107 – Insecure Direct Object Reference with Predictable UUIDv1 Program Code Python Flask idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1:...
CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE
CVE-2026-4040 – Race Condition in File Upload Leading to RCE Program Code Python Flask uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads' os.makedirsUPLOADDIR, existok=True...
CVE-2026-44338-Lab
CVE-2026-44338 PraisonAI Authentication Bypass Lab Local Docker lab for CVE-2026-44338, an authentication bypass in PraisonAI's legacy Flask API server. This lab demonstrates the unauthenticated access condition on the legacy API routes. It intentionally uses a safe route-level reproduction inste...
PT-2026-105699
These are all security issues fixed in the python313-Flask-Cors-6.0.2-1.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11990-1 python313-Flask-Cors-6.0.2-1.2 on GA media
These are all security issues fixed in the python313-Flask-Cors-6.0.2-1.2 package on the GA media of openSUSE Tumbleweed...
cve-exploit-lookup-api
CVE & Exploit Lookup API A unified Flask RESTful API servic...
OPENSUSE-SU-2026:11902-1 python313-Flask-3.1.3-3.1 on GA media
These are all security issues fixed in the python313-Flask-3.1.3-3.1 package on the GA media of openSUSE Tumbleweed...
A Gmail-Based Phishing Detection Prototype for Nigerian Fintech Emails Using Sender Checks and BiLSTM Classification
Phishing emails that impersonate Nigerian fintech providers can combine deceptive sender addresses, lookalike links, and locally familiar language. This study presents a Gmail browser extension that integrates sender-domain and URL checks with a bidirectional long short-term memory BiLSTM...
PT-2026-96710
Name of the Vulnerable Software and Affected Versions dgtlmoon changedetection.io versions prior to 0.60.8 Description A flaw in the Hash Comparison component allows for a remote attack. The check password function within the changedetectionio/flask app.py file is susceptible to manipulation of t...
PT-2026-96714
Name of the Vulnerable Software and Affected Versions dgtlmoon changedetection.io versions prior to 0.60.8 Description An issue in the Authentication Hook component allows for improper authentication. A remote attacker can manipulate the check authentication function within the...
autopentest
AutoPenTest — Automated Internal Network Penetration Testing T...
CLSA-2026-1789987201 TuxCare security update for flask (2 CVEs)
TuxCare rebuilt flask to address 2 CVEs. Fixed in 2.2.1.post2+tuxcare...
CLSA-2026-1789986626 TuxCare security update for flask (2 CVEs)
TuxCare rebuilt flask to address 2 CVEs. Fixed in 0.12.5.post2+tuxcare...
CLSA-2026-1789986625 TuxCare security update for flask (1 CVE)
TuxCare rebuilt flask to address 1 CVE. Fixed in 1.1.2.post2+tuxcare...