CrazyToolBox

CrazyToolBox Содержание 📢 Что такое CrazyToolBox? ⚙️ Запуск ⭐ Текущие возможности 📢 Что такое CrazyToolBox? CrazyToolBox — это набор полезных инструментов, связанных с Web3. Эти инструменты доступны через графический интерфейс приложения CrazyToolBox. Мы будем добавлять новые инструменты в...

IRFuzz

IRFuzz - Простой сканер с правилами Yara IRFuzz — это простой сканер с правилами Yara для архивов документов или любых файлов. Установка 1. Предварительные требования Linux или OS X Yara: просто используйте исходный код последнего релиза, скомпилируйте и установите или установите через pip instal...

CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-vulnerability 1. 소개 이 문서에서는 Pipenv 취약점CVE-2022-21668에 대해 자세히 논의합니다. 다음 섹션에서는 다양한 RCE 공격의 문을 여는 pipenv/utils.py 파일의 버그 코드와 SSL/TLS 연결을 검증하고 호스트 이름을 신뢰할 수 있는 호스트 목록과 대조하는 최근 수정 사항에 대해 다룹니다. 1.1. 목록 항목 Pipenv Pipenv는 프로젝트의 virtualenv를 자동으로 생성하고 관리하는 도구일 뿐만 아니라 패키지를 설치/제거할 때...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: jwt-tool, py3-pipenv, kubeflow-pipelines-visualization-server, confluent-docker-utils, open-webui, py3-cassandra-medusa, py3-pip, pypy-3.10, kserve, datadog-agent, superset...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: jwt-tool, py3-pipenv, kubeflow-pipelines-visualization-server, confluent-docker-utils, open-webui, py3-cassandra-medusa, py3-pip, pypy-3.10, kserve, datadog-agent, superset...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: jwt-tool, py3-pipenv, kubeflow-pipelines-visualization-server, confluent-docker-utils, open-webui, py3-cassandra-medusa, py3-pip, pypy-3.10, kserve, datadog-agent, superset...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: jwt-tool, py3-pipenv, kubeflow-pipelines-visualization-server, confluent-docker-utils, open-webui, py3-cassandra-medusa, py3-pip, pypy-3.10, kserve, datadog-agent, superset...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: jwt-tool, py3-pipenv, kubeflow-pipelines-visualization-server, confluent-docker-utils, open-webui, py3-cassandra-medusa, py3-pip, pypy-3.10, kserve, datadog-agent, superset...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: jwt-tool, py3-pipenv, kubeflow-pipelines-visualization-server, confluent-docker-utils, open-webui, py3-cassandra-medusa, py3-pip, pypy-3.10, kserve, datadog-agent, superset...

ROOT-APP-PYPI-CVE-2022-21668 CVE-2022-21668 in rootio-pipenv - Patched by Root

Root has patched CVE-2022-21668 in the rootio-pipenv package for Root:PyPI. Multiple fixed versions available...

EUVD-2022-0202

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-21668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files...

Fedora 37 : pipenv (2022-8a01f4e871)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8a01f4e871 advisory. Automatic update for pipenv-2021.5.29-7.fc37. Changelog Thu Feb 24 2022 Tomas Orsava - 2021.5.29-7 - Fix for CVE-2022-21668 Resolves: rhbz2039830 Tenable has...

Fedora: Security Advisory for pipenv (FEDORA-2022-0d007466b3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pipenv (FEDORA-2022-77ce20f03a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pipenv (FEDORA-2022-508e460384)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GHSA-QC9X-GJCV-465W Pipenv's requirements.txt parsing allows malicious index url in comments

Issue Summary Due to a flaw in pipenv's parsing of requirements files, an attacker can insert a specially crafted string inside a comment anywhere within a requirements.txt file, which will cause victims who use pipenv to install the requirements file e.g. with "pipenv install -r requirements.txt...

Remote Code Execution (RCE)

pipenv is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of requirements files allowing an attacker to inject a maliciously crafted string inside a comment in a requirements.txt file...

CVE-2022-21668

pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requirements.txt file, which will cause victims...

CVE-2022-21668

pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requirements.txt file, which will cause victims...