CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

CVE-2013-1895

The CVE-2013-1895 entry concerns the py-bcrypt package for Python, specifically before version 0.3. The issue is a race/concurrency flaw: the module does not properly handle concurrent memory access, which allows attackers to bypass authentication by issuing multiple authentication attempts that ...

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

cork (>=0.1.0 <=0.2.0), dvc (>=0.8.2 <=0.8.6) +12 more potentially affected by CVE-2019-16784 via pyinstaller (>=3.0.0 <=3.5.0)

pyinstaller PYPI version =3.0.0, =0.1.0, =0.8.2, =1.0.0.dev0, =2019.6.5, =0.1.22, =0.9.94, =0.0.1, =0.4.0, =0.1.0, =1.0.1, =0.2.0, =0.7.1 Source cves: CVE-2019-16784 Source advisory: OSV:GHSA-7FCJ-PQ9J-WH2R...

FreeBSD : py-matrix-synapse -- multiple vulnerabilities (ed8cbad5-21a8-11ea-9b6d-901b0e934d69)

Matrix developers report : The synapse 1.7.1 release includes several security fixes as well as a fix to a bug exposed by the security fixes. All previous releases of Synapse are affected. Administrators are encouraged to upgrade as soon as possible. - Fix a bug which could cause room events to b...

Telerik UI - Remote Code Execution via Insecure Deserialization Exploit

Exploit for asp platform in category web applications Telerik UI - Remote Code Execution via Insecure Deserialization Exploit See the full write-up at Bishop Fox, CVE-2019-18935: https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui, for a complete walkthrough of...

FreeBSD : py-matrix-synapse -- incomplete cleanup of 3rd-party-IDs on user deactivation (9c36d41c-11df-11ea-9b6d-901b0e934d69)

Matrix developers report : Clean up local threepids from user on account deactivation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution and u...

FreeBSD : py-matrix-synapse -- missing signature checks on some federation APIs (42675046-fa70-11e9-ba4e-901b0e934d69)

Matrix developers report : Make sure that ... events sent over /sendjoin, /sendleave, and /invite, are correctly signed and come from the expected servers. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

Out-of-bounds Write

py-lmdb is vulnerable to out-of-bounds write. The memcpy destination is not properly set up in the mdbnodeadd function for certain values of mdflags, which would allow an attacker to perform invalid write operations when accessing a data.mdb file...

Github-Dorks - Collection Of Github Dorks And Helper Tool To Automate The Process Of Checking Dorks

Github search is quite powerful and useful feature and can be used to search sensitive data on the repositories. Collection of github dorks that can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is supposed to ...

apls (>=0.0.6 <=0.1.0), datacube (=1.6.2) +16 more potentially affected by CVE-2019-17545 via gdal (>=2.1.0 <=3.0.1)

gdal PYPI version =2.1.0, =0.0.6, =0.1.0, =0.0.35, =0.1.0, =1.0.60, =0.0.4, =0.1.2, =1.0.16, =0.9.0, =0.0.6, =0.0.3, =0.1.0 - routing-ortools-osrm =1.0.1 and more Source cves: CVE-2019-17545 Source advisory: OSV:PYSEC-2019-241...

CVE-2019-17514

CVE-2019-17514 concerns the Python documentation (library/glob.html) prior to 2016, which could mislead about sorting in glob.glob. It is not a Python implementation bug, and there are no reports of affected security-relevant code in Python itself. The provided sources note a workaround in newer ...

security/py-ecdsa -- multiple issues

py-ecdsa developers report: Fix CVE-2019-14853 - possible DoS caused by malformed signature decoding. Fix CVE-2019-14859 - signature malleability caused by insufficient checks of DER encoding...

py-lmdb numeric error vulnerability

py-lmdb is an LMDB an embedded transactional database for Python. A numeric error vulnerability exists in py-lmdb version 0.97. The vulnerability arises from a number generated by a networked system or product that does not properly compute or convert the number. An attacker could exploit this...

py-lmdb buffer overflow vulnerability (CNVD-2019-39377)

py-lmdb is an LMDB an embedded transactional database for Python. A buffer overflow vulnerability exists in py-lmdb version 0.97. An attacker can exploit this vulnerability to cause invalid write operations...

py-lmdb buffer overflow vulnerability (CNVD-2019-39376)

py-lmdb is an LMDB an embedded transactional database for Python. A buffer overflow vulnerability exists in py-lmdb version 0.97. An attacker can exploit this vulnerability to cause an invalid write operation...

py-lmdb buffer overflow vulnerability

py-lmdb is an LMDB an embedded transactional database for Python. A buffer error vulnerability exists in py-lmdb version 0.97. An attacker can exploit this vulnerability to cause an invalid write operation...

CVE-2019-16225

An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

CVE-2019-16226

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...