CrazyToolBox

CrazyToolBox Table of contents 📢 What is CrazyToolBox? ⚙️ Execution ⭐ Current features 📢 What is CrazyToolBox? CrazyToolBox is a collection of usefult tools relative to Web3. These tools can be accessed through a GUI using the CrazyToolBox application. We will be adding new tools to the...

CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-vulnerability 1. Introduction In this document the Pipenv vulnerabilityCVE-2022-21668 is discussed in detail. The following sections cover the bug code in pipenv/utils.py file which opens up the door for various RCE attacks and also about the recent fix which validates...

IRFuzz

IRFuzz - Simple Scanner with Yara Rules IRFuzz is a simple scanner with yara rules for document archives or any files. Install 1. Prerequisites Linux or OS X Yara: just use the latest release source code, compile and install it or install it via pip install yara-python Yara Rules - You may...

GHSA-XMJ3-9GF7-H52W vulnerabilities

Vulnerabilities for packages: pypy-3.11, py3-pipenv, kubeflow-katib, semgrep, py3-cassandra-medusa, py3.14-pipenv, pypy-3.10...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: jwt-tool, superset, kserve, confluent-docker-utils, py3-cassandra-medusa, py3-pipenv, py3-pip, open-webui, kubeflow-pipelines, kubeflow-pipelines-visualization-server, datadog-agent, pypy-3.10...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: jwt-tool, superset, kserve, confluent-docker-utils, py3-cassandra-medusa, py3-pipenv, py3-pip, open-webui, kubeflow-pipelines, kubeflow-pipelines-visualization-server, datadog-agent, pypy-3.10...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: jwt-tool, superset, kserve, confluent-docker-utils, py3-cassandra-medusa, py3-pipenv, py3-pip, open-webui, kubeflow-pipelines, kubeflow-pipelines-visualization-server, datadog-agent, pypy-3.10...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: jwt-tool, superset, kserve, confluent-docker-utils, py3-cassandra-medusa, py3-pipenv, py3-pip, open-webui, kubeflow-pipelines, kubeflow-pipelines-visualization-server, datadog-agent, pypy-3.10...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: jwt-tool, superset, kserve, confluent-docker-utils, py3-cassandra-medusa, py3-pipenv, py3-pip, open-webui, kubeflow-pipelines, kubeflow-pipelines-visualization-server, datadog-agent, pypy-3.10...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: jwt-tool, superset, kserve, confluent-docker-utils, py3-cassandra-medusa, py3-pipenv, py3-pip, open-webui, kubeflow-pipelines, kubeflow-pipelines-visualization-server, datadog-agent, pypy-3.10...

ROOT-APP-PYPI-CVE-2022-21668 CVE-2022-21668 in rootio-pipenv - Patched by Root

Root has patched CVE-2022-21668 in the rootio-pipenv package for Root:PyPI. Multiple fixed versions available...

EUVD-2022-0202

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-21668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files...

Fedora 37 : pipenv (2022-8a01f4e871)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8a01f4e871 advisory. Automatic update for pipenv-2021.5.29-7.fc37. Changelog Thu Feb 24 2022 Tomas Orsava - 2021.5.29-7 - Fix for CVE-2022-21668 Resolves: rhbz2039830 Tenable has...

Fedora: Security Advisory for pipenv (FEDORA-2022-0d007466b3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pipenv (FEDORA-2022-508e460384)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pipenv (FEDORA-2022-77ce20f03a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GHSA-QC9X-GJCV-465W Pipenv's requirements.txt parsing allows malicious index url in comments

Issue Summary Due to a flaw in pipenv's parsing of requirements files, an attacker can insert a specially crafted string inside a comment anywhere within a requirements.txt file, which will cause victims who use pipenv to install the requirements file e.g. with "pipenv install -r requirements.txt...

invenio-cli (>=0.10.0, <=1.0.0a9), kebechet (>=1.0.5, <=1.1.1) +2 more potentially affected by CVE-2022-21668 via pipenv (>=2018.11.26, <=2021.5.29)

pipenv PYPI version =2018.11.26, =0.10.0, =1.0.5, =0.0.9, =0.1.4 - unfurl 0.3.0 Source cves: CVE-2022-21668 Source advisory: OSV:GHSA-QC9X-GJCV-465W...

invenio-cli (>=0.10.0, <=1.0.0a9), kebechet (>=1.0.5, <=1.1.1) +2 more potentially affected by CVE-2022-21668 via pipenv (>=2018.11.26, <=2021.5.29)

pipenv PYPI version =2018.11.26, =0.10.0, =1.0.5, =0.0.9, =0.1.4 - unfurl 0.3.0 Source cves: CVE-2022-21668 Source advisory: GHSA-QC9X-GJCV-465W...