Lucene search
+L

7 matches found

ATTACKERKB
ATTACKERKB
added 2026/06/23 12:13 p.m.9 views

CVE-2026-56315

picklescan before 1.0.4 fails to block at least seven Python standard library modules including uuid, osxsupport, aixsupport, pyrepl.pager, and imaplib exposing eight functions that provide direct arbitrary command execution. Attackers can craft malicious pickle files importing these unblocked...

9.8CVSS6.7AI score0.00757EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/02 12:0 a.m.23 views

FreeBSD : Python -- imaplib module, when passed a user-controlled command, can have additional commands injected using newlines (0be929a5-2e0f-11f1-88c7-00a098b42aeb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0be929a5-2e0f-11f1-88c7-00a098b42aeb advisory. Python Software Foundation Security Developer reports: The imaplib module, when passed a user-controlle...

5.9CVSS7.1AI score0.0036EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/20 6:24 p.m.26 views

GHSA-83PF-V6QQ-PWMR Fickling has a detection bypass via stdlib network-protocol constructors

Our assessment imtplib, imaplib, ftplib, poplib, telnetlib, and nntplib were added to the list of unsafe imports https://github.com/trailofbits/fickling/commit/6d20564d23acf14b42ec883908aed159be7b9ade. The UnusedVariables heuristic works as expected. Original report Summary Fickling's checksafety...

2.3CVSS5.9AI score
SaveExploits0References4
OSV
OSV
added 2026/02/18 4:36 p.m.9 views

CLSA-2026-1771432562 Fix CVE(s): CVE-2025-15366

SECURITY UPDATE: defect in imaplib module, when passed a user-controlled command, commands can be injected using newlines - debian/patches/CVE-2025-15366.patch: Fix command injection by rejecting commands containing control characters - CVE-2025-15366...

5.9CVSS7.1AI score0.0036EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/21 12:31 a.m.8 views

EUVD-2025-206304

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS5.5AI score0.0036EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/01/20 9:40 p.m.113 views

CVE-2025-15366 IMAP command injection in user-controlled commands

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS0.0036EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2013/12/26 12:0 a.m.10 views

PT-2013-3377 · Python +4 · Python +4

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.6.9 Python versions prior to 2.7.4 Python versions prior to 2.7.6 Python versions prior to 3.3.3 Description: The issue is related to various Python modules, including httplib, ftplib, imaplib, nntplib, poplib, and...

10CVSS6.6AI score0.75116EPSS
SaveExploits69References356
Rows per page
Query Builder