145 matches found
Scrummage
Scrummage VERSION 3.9 Improved dependency management migration to Poetry Stricter type checking of variables. Improved anonymity of the configuration file via encryption. Manual editing of configuration file is now difficult and it's advised to not edit the configuration file manually. Code quali...
CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1
CVE-2026-11107 – 予測可能なUUIDv1による安全でない直接オブジェクト参照（IDOR） プログラムコード（Python Flask） root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1: "name":...
vulpy
Vulpy - Web Application Security Lab Vulpy is a web application developed in Python / Flask / SQLite that has two faces. GOOD : Tries to code with secure development best practices in mind. BAD : Tries to code like possibly you. :p Is developed has a laboratory for the following courses: Secure...
BabyShark
INTRO This is a basic C2 generic server written in Python and Flask. This code has based ideia to GTRS, which uses Google Translator as a proxy for sending commands to the infected host. The BabyShark project aims to centralize reverse connections with agents, creating a way to centralize several...
flask_heroku_redirector
Flask Heroku C2 サンプル Heroku 上で実行できるシンプルな Python Flask サンプルアプリケーションです。 開発環境のセットアップ virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py デプロイ heroku create git push heroku master 設定...
Python Flask-Security - Open Redirect
Python Flask-Security contains an open redirect vulnerability. Existing code validates that the URL specified in the next parameter is either relative or has the same network location as the requesting URL. Certain browsers accept and fill in the blanks of possibly incomplete or malformed URLs. A...
SucoshScanny
Sucosh Scanny "Sucosh"는 PythonFlask-Django 및 NodeJs를 위한 자동화된 소스 코드 취약점 스캐너SAST이자 평가 프레임워크로, 웹 애플리케이션 개발 또는 소스 코드 분석 과정에서 코드 리뷰를 수행할 수 있습니다. 주어진 소스 코드에서 많은 취약점RCE, SSTI, 안전하지 않은 역직렬화, SSRF, SQLI, CSRF 등을 탐지할 수 있습니다. 현재는 Pythonflask, django 및 NodeJsexpress js. 언어의 탐지 모듈만 완료되었습니다. 향후에는 PHPLaravel,...
linux-explorer
이 프로젝트는 더 이상 유지되지 않습니다! Linux Expl0rer Python과 Flask로 작성된 Linux 엔드포인트용 사용하기 쉬운 라이브 포렌식 도구 상자입니다. 기능 ps 전체 프로세스 목록 보기 프로세스 메모리 맵 검사 및 메모리 문자열 쉽게 가져오기 한 번의 클릭으로 프로세스 메모리 덤프 공개 서비스에서 해시 자동 검색 VirusTotal Intezer Analyze AlienVault OTX MalShare users 사용자 목록 find 이름/정규식으로 의심스러운 파일 검색 netstat Whois logs...
CVE-2026-46556
FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery SSRF vulnerability in getimageinfo allows any authenticated user to force the server to send HTTP requests to arbitrary internal endpoints, including cloud metadata...
Security update for python-Flask (moderate)
openSUSE security update: security update for python-flask ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20885-1 Rating: moderate References: bsc1258700 Cross-References: CVE-2026-27205 CVSS scores: CVE-2026-27205 SUSE : 6.5...
SUSE-SU-2026:22023-1 Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...
OPENSUSE-SU-2026:20885-1 Security update for python-Flask
This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...
[SECURITY] [DLA 4605-1] python-flask-httpauth security update
Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias May 28, 2026 https://wiki.debian.org/LTS Package : python-flask-httpauth Version : 3.2.4-3.1+deb11u1 CVE ID : CVE-2026-34531 Debian Bug : 1132581 A vulnerability was found in...
Debian dla-4605 : python-flask-httpauth-doc - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4605 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/...
CoreExploit-Final
CoreExploit 🔐 Ethical Penetration Testing Learning Platfor...
vulnerability-lab
🔐 Vulnerability Lab Buffer Overflow + SQLi ⚠️ FOR EDUCATI...
Fedora 44 : python-flask-httpauth (2026-fd53570465)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fd53570465 advisory. Update to version 4.8.1 2454342 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora: Security Advisory (FEDORA-2026-04d6f223e0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2026:20576-1 Security update for python-Flask-HTTPAuth
This update for python-Flask-HTTPAuth fixes the following issues: Changes in python-Flask-HTTPAuth: - CVE-2026-34531: Do not accept empty tokens bsc1261355...