Lucene search
+L

101 matches found

Github Security Blog
Github Security Blog
added 2022/10/16 12:00 p.m.158 views

Withdrawn Advisory: ReDoS in py library when used with subversion

Withdrawn Advisory This advisory has been withdrawn because evidence does not suggest that CVE-2022-42969 is a valid, reproducible vulnerability. This link is maintained to preserve external references. Original Description The py library through 1.11.0 for Python allows remote attackers to condu...

7.5CVSS5.8AI score0.01664EPSS
SaveExploits1References10Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/16 12:00 a.m.10 views

PT-2022-26687

Name of the Vulnerable Software and Affected Versions py versions through 1.11.0 Description The py library allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled...

8.7CVSS7.2AI score0.01664EPSS
SaveExploits1References47
CNNVD
CNNVD
added 2022/10/16 12:00 a.m.9 views

Pytest 安全漏洞

Pytest is a Python language-based testing framework from the Pytest team. A security vulnerability exists in Pytest versions prior to 1.11.0 that stems from the mishandling of its InfoSvnCommand parameter allowing remote attackers to conduct regular expression denial-of-service attacks via...

7.5CVSS6.7AI score0.01664EPSS
SaveExploits1References6
OSV
OSV
added 2022/10/03 12:13 p.m.12 views

CLSA-2022-1664799239 Fix CVE(s):

Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...

5.8AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2022/09/02 9:02 a.m.421 views

Exploit for Path Traversal in Secureauth Impacket

Impacket ======== !Latest Versionhttps://img.shields.io/pyp...

9.8CVSS9.6AI score0.1926EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/08/18 12:00 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2022:2831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.04607EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/18 12:00 a.m.38 views

openSUSE: Security Advisory for Recommended (SUSE-SU-2022:2831-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.04607EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/17 12:42 p.m.10 views

SUSE-SU-2022:2831-1 Recommended update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures, python-coverage, python-oniconfig, python-unittest-mixins

This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 bsc1196696, bsc1195916, jscSLE-23972 - Remove redundant python3 dependency from Requires - Update regular expression t...

7.5CVSS6.7AI score0.04607EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2021/06/22 9:30 p.m.63 views

HashCheck - Tool To Assist In The Search For Leaked Passwords

This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the first 5 characters...

7.2AI score
SaveExploits0References1
Rockylinux
Rockylinux
added 2021/05/18 6:24 a.m.21 views

new module: python39:3.9

An update is available for python-more-itertools, pytest, python-psycopg2, python-lxml, python-PyMySQL, python3x-six, python-toml, python-urllib3, PyYAML, python-attrs, python-iniconfig, python-requests, modwsgi, python3x-pip, python-py, python-chardet, python-pluggy, Cython, python-psutil,...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2020:0790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03196EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2020:0555-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.07443EPSS
SaveExploits2References9
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2020:0792-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03196EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2020/12/09 12:00 a.m.21 views

Pytest Security Breach

Pytest is a Python language-based testing framework from the Pytest team. Pytest has a security vulnerability in py.path.svnwc that stems from a denial of service via a regular expression in py.path from the python-py svnwc component can be exploited by an attacker who can use the vulnerability t...

7.5CVSS6.8AI score0.04607EPSS
SaveExploits0References15
Gitee
Gitee
added 2020/08/22 9:52 a.m.10 views

Sitadel

This is a web application security scanner called Sitadel, which is an update for WAScan making it compatible with Python 3.4 and above. It allows for more flexibility in writing new modules and implementing new features, such as frontend framework detection, content delivery network detection, a...

7.1AI score
SaveExploits0
Gitee
Gitee
added 2020/08/04 5:58 p.m.6 views

pwntools

This repository is an offensive tool for binary exploitation, specifically a Python library for writing exploits. It is not a PoC exploit for a specific CVE, but rather a toolkit for creating exploits. The primary vulnerability class targeted by this library is not explicitly stated, but it is...

6.9AI score
SaveExploits0
Rockylinux
Rockylinux
added 2020/04/28 8:55 a.m.57 views

python27:2.7 security, bug fix, and enhancement update

An update is available for python-pymongo, python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet,...

9.8CVSS7.6AI score0.07443EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2020/03/26 12:00 a.m.38 views

SUSE SLES12 Security Update : python-cffi, python-cryptography (SUSE-SU-2020:0792-1)

This update for python-cffi, python-cryptography fixes the following issues : Security issue fixed : CVE-2018-10903: Fixed GCM tag forgery via truncated tag in finalizewithtag API bsc1101820. Non-security issues fixed : python-cffi was updated to 1.11.2 bsc1138748, jscECO-1256, jscPM-1598: fixed ...

7.5CVSS6.9AI score0.03196EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2020/03/06 12:00 a.m.38 views

SUSE SLES12 Security Update : python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer (SUSE-SU-2020:0555-1)

This update for python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer, python-jsonpatch, python-jsonpointer, python-scandir, python-PyYAML fixes the...

7.5CVSS7.1AI score0.07443EPSS
SaveExploits2References9
Rockylinux
Rockylinux
added 2019/09/10 3:32 p.m.18 views

python27:2.7 bug fix update

An update is available for python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet, python-markupsafe, python-pluggy,...

0.4AI score
SaveExploits0
Rows per page
Query Builder