openmptcprouter-vps-admin 授权问题漏洞

openmptcprouter-vps-admin is an application. An OpenMPTCProuter API is based on FastAPI. A security vulnerability in Omr-admin.py in openmptcprouter-vps-admin version 0.57.3 and earlier can be exploited by remote attackers to guess passwords via a timing attack...

Cross-site Scripting (XSS) - Stored in jam-py/jam-py

✍️ Description Stored XSS at comment box at suppliers Profile. In fact, all input has XSS. No input parameter is sanitized before saving in the database. 🕵️‍♂️ Proof of Concept 1. git clone https://github.com/jam-py/jam-py 2. cd jam-py && python setup.py install 3. cd demo 4. python server.py 5...

py vulnerable to Regular Expression Denial of Service

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

PT-2021-3601

Name of the Vulnerable Software and Affected Versions Ansible Engine versions prior to 2.10.6rc1 Ansible Engine versions prior to 2.9.18rc1 Ansible Engine versions prior to 2.8.19rc1 Description A flaw was found in the Ansible Engine, where sensitive information is not masked by default and is no...

py-markdown2 -- regular expression denial of service vulnerability

Ben Caller reports: markdown2 =1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time...

tensorflow-py:sparseCountSparseOutput_fuzz: Crash in std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM

Detailed Report: https://oss-fuzz.com/testcase?key=5658018218901504 Project: tensorflow-py Fuzzing Engine: libFuzzer Fuzz Target: sparseCountSparseOutputfuzz Job Type: libfuzzerasantensorflow-py Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62c000093d20 Crash State:...

Moderate Photon OS Security Update - PHSA-2021-0362

Updates of 'unbound', 'binutils', 'mysql' packages of Photon OS have been released...

Updated python-py packages fix a security vulnerability

A denial of service via regular expression in the py.path.svnwc component of python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality CVE-2020-29651...

MGASA-2021-0071 Updated python-py packages fix a security vulnerability

A denial of service via regular expression in the py.path.svnwc component of python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality CVE-2020-29651...

tensorflow-py:immutableConst_fuzz: Segv on unknown address in tensorflow::TensorHandle::TensorHandle

Detailed Report: https://oss-fuzz.com/testcase?key=5351196414050304 Project: tensorflow-py Fuzzing Engine: libFuzzer Fuzz Target: immutableConstfuzz Job Type: libfuzzerasantensorflow-py Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

tensorflow-py:immutableConst_fuzz: Segv on unknown address in tensorflow::EagerContext::FindDeviceFromName

Detailed Report: https://oss-fuzz.com/testcase?key=4713652877918208 Project: tensorflow-py Fuzzing Engine: libFuzzer Fuzz Target: immutableConstfuzz Job Type: libfuzzerasantensorflow-py Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

CVE-2020-29651 affecting package python-py 1.6.0-4

CVE-2020-29651 affecting package python-py 1.6.0-4. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory for python-py (FEDORA-2020-8371993b6b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: python-py-1.10.0-1.fc32

The py lib is a Python development support library featuring the following tools and modules: py.path: uniform local and svn path objects py.apipkg: explicit API control and lazy-importing py.iniconfig: easy parsing of .ini files py.code: dynamic code generation and introspection py.path: uniform...

Fedora 33 : python-py (2020-8371993b6b)

1.10.0 2020-12-12 - Fix a regular expression DoS vulnerability in the py.path.svnwc SVN blame functionality CVE-2020-29651 - Update vendored apipkg: 1.4 = 1.5 - Update vendored iniconfig: 1.0.0 = 1.1.1 Note that Tenable Network Security has extracted the preceding description block directly from...

CVE-2020-35917

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From...

CVE-2020-35917

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From...

FreeBSD : py-matrix-synapse -- DoS on Federation API (cfa0be42-3cd7-11eb-9de7-641c67a117d8)

Matrix developers reports : A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a /sendjoin, /sendleave, /invite or /exchangethirdpartyinvite request. This can lead to a denial of service in which future events will...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...