CVE-2026-71513 NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

CVE-2026-71513

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

EUVD-2026-64296

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

CVE-2026-71513 NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

CVE-2026-71513

NLTK versions 3.10.0 through 3.10.2 contain a remote code execution vulnerability in the AllowlistUnpickler component (picklesec.py). The root cause is that the allowlist validation checks only the pickle module string but not the global name, enabling attackers to resolve dotted names via attrib...

CVE-2026-71513 NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

cve-2026-71362-magento-lab

CVE-2026-71362 — Magento / Adobe Commerce Labor zum Identitätswechsel der Kundensitzung Ein in sich geschlossenes Docker-Labor mit einem einzigen Befehl, das CVE-2026-71362 Ende-zu-Ende reproduziert und es Ihnen ermöglicht, Adobes Fix zu verifizieren, damit Verteidiger, Forscher und Studenten ein...

dirty_frag_mitigation

dirtyfragmitigation 1. Linux dirty frag exploit CVE-2026-43500 को कम करने के लिए एक bash स्क्रिप्ट 2. सभी Debian/Ubuntu Arch आधारित प्लेटफॉर्म्स पर काम करता है जैसे Kali, ParrotSec, BlackArch 3. गैर-रूट उपयोगकर्ता के रूप में चलाने के लिए --check जोड़ा गया। fragnesia समर्थन जोड़ा गया क्योंकि यह...

AzureAttackKit

AzureAttackKit Eine Sammlung von Azure-Tools, die heruntergeladen werden können, um eine Umgebung von einem Windows-Rechner oder Cloudshell aus anzugreifen. Voraussetzungen Git für Windows, wenn du über PowerShell automatisch die neuesten Versionen von allem herunterladen möchtest. Klonen Um alle...

SQLRecon

SQLRecon SQLRecon एक Microsoft SQL Server टूलकिट है जिसे आक्रामक टोही और पोस्ट-एक्सप्लॉइटेशन के लिए डिज़ाइन किया गया है। प्रत्येक तकनीक का उपयोग कैसे करें, इसके बारे में विस्तृत जानकारी के लिए विकि देखें। आप SQLRecon की एक प्रति रिलीज़ पृष्ठ से डाउनलोड कर सकते हैं। वैकल्पिक रूप से, आप सोल्यूशन को...

Azure-AD-Incident-Response-PowerShell-Module

Módulo PowerShell de Resposta a Incidentes do Azure AD O módulo PowerShell de Resposta a Incidentes do Azure Active Directory fornece uma série de ferramentas, desenvolvidas pelo Grupo de Produtos do Azure Active Directory em conjunto com a Microsoft Detection and Response Team DART, para auxilia...

KeeFarceReborn

KeeFarce Reborn Una DLL autonoma che esporta i database in chiaro una volta iniettata nel processo di KeePass. Fortemente ispirata ai grandi progetti KeeFarce, KeeThief e KeePassHax. Perché un altro strumento di estrazione KeePass? Qualche anno fa, @denandz ha rilasciato KeeFarce, il primo...

unidbg

unidbg Consente di emulare una libreria nativa Android e una sperimentale emulazione iOS. Questo è un progetto educativo per imparare di più sul formato file ELF/MachO e sull'assembly ARM. Usalo a tuo rischio e pericolo! Caratteristiche Supporto MCP Model Context Protocol per il debug assistito...

Exploit for CVE-2026-66747

OIEH Router Checker 내 공유기가 중국산 백도어ENDLESSDOORS에 해당하는지 클릭...

laravel-access-control-lab

laravel-access-control-lab A deliberately vulnerable Larave...

SUSE CVE-2026-53804

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

Automated-Data-and-Code-Quality-Controller

codesentry Static analysis for Python and JavaScript. Finds i...

PT-2026-79717

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create direct keys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmd exec+0x550/0xca0 mlx5 core Read of size 272 at addr 0000000176795020 by task...

PT-2026-79718

In the Linux kernel, the following vulnerability has been resolved: vhost iotlb: bound map allocation in add range vhost iotlb add range ctx only retires an old entry when the table has a non-zero limit, has exactly reached that limit and has VHOST IOTLB FLAG RETIRE set. Non-retiring tables can...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:3661-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3661-1 advisory. This update for helm rebuilds it against the current go security release. Tenable has extracted the preceding description block directly fro...