109 matches found
locust-cloud (>=0.1.4, <=1.7.0), reliability-chatbot (>=0.16.0, <=0.31.0) +2 more potentially affected by CVE-2026-112909 via filelock (3.15.1)
filelock PYPI version 3.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - locust-cloud =0.1.4, =0.16.0, =0.9.3.2, =0.8.5, =0.9.3.2 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...
CVE-2026-111883
A flaw was found in Locust. The application's web interface is vulnerable to Cross-Site Request Forgery CSRF, an attack that tricks an authenticated user into executing unintended actions. A remote attacker can exploit this flaw by enticing an operator to visit a crafted webpage, triggering...
api-automation-kit (>=0.2.0, <=0.7.0), appian-locust (>=2.0.0a2, <=2.25.0) +14 more potentially affected by CVE-2026-111883 via locust (>=2.0.0, <=2.46.6)
locust PYPI version =2.0.0, =0.2.0, =2.0.0a2, =0.0.7.0, =2.4.0, =1.0.5, =0.1.4, =1.2.6, =0.0.2, =1.0.50, =1.0.4, =0.1.1, =1.0.0, =1.4.34 and more Source cves: CVE-2026-111883 Source advisory: SNYK:PYTHON-LOCUST-21431597...
Cross-site Request Forgery (CSRF)
Overview locust is a Developer friendly load testing framework Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the /stop and /stats/reset endpoints, which accepted GET requests, allowing an attacker to trick an authenticated user into visiting a malicious...
CVE-2026-111883
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...
CVE-2026-111883 Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...
EUVD-2026-104320
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...
CVE-2026-111883 Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...
CVE-2026-111883
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...
CVE-2026-111883
Locust versions through 2.46.7 are vulnerable to a cross-site request forgery (CSRF) flaw within the Web UI. The issue allows remote attackers to perform unauthorized actions by luring an operator to a malicious page that triggers cross-site GET requests to the /stop and /stats/reset endpoints. S...
CVE-2026-111883: Cross-Site Request Forgery (CSRF)
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...
PT-2026-117393
Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...
Locust cross-site request forgeing vulnerability
Locust 2.46.7 and earlier versions have a cross-site request forgeing vulnerability. This vulnerability is due to a susceptibility to cross-site request forgery attacks. Attackers can trigger cross-site GET requests for /stop and/stats/reset by inducing operators to access malicious pages, thereb...
Malicious code in handicapped-lime-locust (npm)
Source: amazon-inspector 4d924e410d6227e3c2fb8e376fe41165b904dfa5ace6bfd684a455e71ff2b288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in confident-azure-locust (npm)
Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in anxious-scarlet-locust (npm)
Source: amazon-inspector 1658bc6a27b25816f7382f35d0d6fe8c71f81be5380c71b107956a4aa5ec71b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in abstract-emerald-locust (npm)
Source: amazon-inspector 3ba7c64cd23064df86ac9fd3f857ab0230e22217e554cb06cd3f105814b9adfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Locust Exposure Detection
Locust is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Locust is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Locust Exposure Detection', 'description': 'Locust is exposed.', 'author':...