Lucene search
+L

177 matches found

OpenVAS
OpenVAS
•added 2022/03/27 12:00 a.m.•54 views

Fedora: Security Advisory for python-fastapi (FEDORA-2022-dbf6e00ba8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.6AI score0.0155EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/03/08 12:00 a.m.•64 views

Debian DLA-2938-1 : twisted - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2938 advisory. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an...

7.5CVSS7.3AI score0.0351EPSS
SaveExploits1References4
osv_pysec
osv_pysec
•added 2022/03/03 9:15 p.m.•86 views

PYSEC-2022-160

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach...

7.5CVSS7.3AI score0.0351EPSS
SaveExploits1References4
Prion
Prion
•added 2022/03/03 9:15 p.m.•29 views

Design/Logic Flaw

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach...

5CVSS7.4AI score0.0351EPSS
SaveExploits1References9Affected Software5
Cvelist
Cvelist
•added 2022/03/03 12:00 a.m.•37 views

CVE-2022-21716 Buffer Overflow in Twisted

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach...

7.5CVSS7.8AI score0.0351EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2022/03/03 12:00 a.m.•49 views

CVE-2022-21716 Buffer Overflow in Twisted

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach...

7.5CVSS7.8AI score
SaveExploits0References11
CVE
CVE
•added 2022/03/03 12:00 a.m.•383 views

CVE-2022-21716

CVE-2022-21716 affects Twisted (Python, event-driven networking framework). The issue arises in Twisted SSH client/server where, prior to 22.2.0, the peer SSH version identifier can be fed an unlimited amount of data, causing a memory-exhaustion vulnerability (buffer growth). The example of explo...

7.5CVSS7.3AI score0.0351EPSS
SaveExploits1References9Affected Software1
Kitploit
Kitploit
•added 2022/02/23 8:30 p.m.•58 views

Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc

Notice For Deprecation This project is no longer being worked on by the developer. As of today, the program has many flaws and is not up to modern OSINT standards. A lot of APIs utilized within Scylla are no longer working as they did when the project was first released. The developer wrote Scyll...

7.3AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/12/19 12:00 a.m.•37 views

vault-cli injection vulnerability

vault-cli is a Python 3.6 tool that provides simple interactions to manipulate secrets from Hashicorp Vault. vault-cli is vulnerable to an injection vulnerability in versions prior to 3.0.0, which stems from the failure of a network system or product to properly filter special elements in code...

9.1CVSS4.2AI score0.05167EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2021/12/10 12:00 a.m.•37 views

Oracle Linux 8 : python36:3.6 (ELSA-2021-4150)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4150 advisory. python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 3.6.7-1 - Modify for RHEL8 - Update to new Python...

7.5CVSS7.7AI score0.03906EPSS
SaveExploits1References3
Oracle linux
Oracle linux
•added 2021/11/16 12:00 a.m.•59 views

babel security and bug fix update

2.5.1-7 - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the python3-babel package Resolves: rhbz1967173 2.5.1-6 - Fix CVE-2021-20095 Resolves: rhbz1955615...

7.8CVSS7.8AI score0.0077EPSS
SaveExploits1
Oracle linux
Oracle linux
•added 2021/11/16 12:00 a.m.•111 views

python36:3.6 security and bug fix update

python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 3.6.7-1 - Modify for RHEL8 - Update to new Python version - Resolves: rhbz1656044 python-wheel 1:0.31.1-3 - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz1933055...

7.5CVSS0.3AI score0.03906EPSS
SaveExploits1
Kitploit
Kitploit
•added 2021/11/05 11:30 a.m.•557 views

PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact

PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs credentials used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the network Crawls shared drives in th...

7.4AI score
SaveExploits0References17
Kitploit
Kitploit
•added 2021/06/27 12:30 p.m.•63 views

HoneyCreds - Network Credential Injection To Detect Responder And Other Network Poisoners

HoneyCreds network credential injection to detect responder and other network poisoners. Requirements Requires Python 3.6+ tested on Python 3.9 smbprotocol cffi splunk-sdk Installation git clone https://github.com/Ben0xA/HoneyCreds.git cd HoneyCreds pip3 install -r requirements.txt Running python...

7.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/05/27 12:00 a.m.•35 views

Fedora: Security Advisory for python-fastapi (FEDORA-2021-e7fabd81fb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.00975EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/05/23 1:07 a.m.•169 views

[SECURITY] Fedora 34 Update: python-fastapi-0.65.1-2.fc34

FastAPI is a modern, fast high-performance, web framework for building AP Is with Python 3.6+ based on standard Python type hints. The key features are: =EF=BF=BD=EF=BF=BD=EF=BF=BD Fast: Very high performance, on par with Node JS and Go thanks to Starlette and Pydantic. One of the fastest Python...

5CVSS5.8AI score0.00975EPSS
SaveExploits0
osv_alba
osv_alba
•added 2021/05/18 6:25 a.m.•15 views

ALBA-2021:1930 python36:3.6 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
AlmaLinux
AlmaLinux
•added 2021/05/18 6:25 a.m.•27 views

python36:3.6 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.6AI score
SaveExploits0References1
Rockylinux
Rockylinux
•added 2021/05/18 6:25 a.m.•20 views

python36:3.6 bug fix and enhancement update

An update is available for python-pymongo, python-sqlalchemy, python-docutils, python-pygments, python-PyMySQL, python-docs, python36, python-virtualenv, python-distro, python-nose, python-wheel, scipy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, whic...

1.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2021/04/06 12:30 p.m.•624 views

Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc...

Scylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles main platforms assigned to a certain username. In continuation,...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder