1925 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-26303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
Malicious code in @zalastax/nolb-py (npm)
The package @zalastax/nolb-py was found to contain malicious code...
UBUNTU-CVE-2025-50817
A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker...
CVE-2025-50817
Removed by vendor...
Malicious code in st-py-de-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-41768 Malicious code in st-py-de-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
awesome-termux-hacking
This is an awesome list of Termux hacking tools. It appears to be a collection of various tools and frameworks for penetration testing, vulnerability assessment, and exploitation. The list includes tools for tasks such as: Subdomain enumeration e.g., Sublist3r Vulnerability scanning e.g., w3af,...
GHSA-X8C6-GJ59-6RX8 py-libp2p is vulnerable to DoS attacks through use of large RSA keys
py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...
py-libp2p is vulnerable to DoS attacks through use of large RSA keys
py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...
CVE-2025-29606
py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...
CVE-2025-29606
The CVE-2025-29606 entry impacts the Python libp2p project (py-libp2p) prior to 0.2.3, where a peer can trigger a DoS by sending a very large RSA key. Root cause: insufficient validation of RSA key sizes, leading to resource exhaustion on the target. Affected component/file is the RSA key handlin...
CVE-2025-29606
py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...
PT-2025-29420
Name of the Vulnerable Software and Affected Versions: py-libp2p versions prior to 0.2.3 Description: py-libp2p versions prior to 0.2.3 are susceptible to a denial of service resource consumption issue. This occurs when a peer sends a large RSA key. Recommendations: Update py-libp2p to version...
CVE-2025-29606
py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...
CVE-2025-29606
py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...
GHSA-2HW3-H8QX-HQQP OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer
XSS via .py file containing script tag interpreted as HTML Summary A vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in tags may be interpreted and executed as HTML in certain modes. This leads to ...
OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer
XSS via .py file containing script tag interpreted as HTML Summary A vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in tags may be interpreted and executed as HTML in certain modes. This leads to ...
CVE-2018-25111
CVE-2018-25111 affects django-helpdesk versions prior to 1.0.0. The root cause is os.umask(0) usage in models.py, which leads to exposure of sensitive data. Affected component: django-helpdesk (Python/Django app). Impact stated: sensitive data exposure with local access; no remote/external vector...
CVE-2023-1000
A vulnerability was found in cyanomiko dcnnt-py up to 0.9.0. It has been classified as critical. Affected is the function main of the file dcnnt/plugins/notifications.py of the component Notification Handler. The manipulation leads to command injection. It is possible to launch the attack remotel...