Lucene search
K

10 matches found

SUSE CVE
SUSE CVE
added 2026/04/07 11:25 p.m.2 views

SUSE CVE-2026-34444

Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attributefilter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitra...

10CVSS6AI score0.00049EPSS
Exploits1References3
NVD
NVD
added 2026/04/06 4:16 p.m.1 views

CVE-2026-34444

Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attributefilter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitra...

10CVSS0.00049EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.1 views

PT-2026-30661

Name of the Vulnerable Software and Affected Versions Lupa versions 2.6 and earlier Description Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In versions 2.6 and earlier, the attribute filter is not consistently applied when attributes are accessed through built-in functions like...

10CVSS6.2AI score0.00049EPSS
Exploits1References16
OSV
OSV
added 2025/11/10 10:15 p.m.0 views

UBUNTU-CVE-2025-64183

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there is a use-after-free in PyObjectStealAttrString of pyOpenEXRold.cpp...

7.5CVSS7.1AI score0.00067EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/04/02 12:0 a.m.3 views

PT-2025-14539 · Crates.Io · Pyo3

PyString::from object took &str arguments and forwarded them directly to the Python C API without checking for terminating nul bytes. This could lead the Python interpreter to read beyond the end of the &str data and potentially leak contents of the out-of-bounds read by raising a Python exceptio...

6.3CVSS7AI score
Exploits0References5
CVE
CVE
added 2021/10/21 8:10 p.m.35 views

CVE-2021-41168

Summary. Snudown (reddit‑specific fork of Sundown) contains a vulnerability in the reference table hash implementation. The reference hashes use a weak hash function, enabling an attacker to generate many hash collisions, leading to a hash‑collision DoS attack and long retrieval times due to dupl...

6.5CVSS6.4AI score0.00193EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/10/21 12:0 a.m.1 views

Snudown 加密问题漏洞

Snudown is an open source package. It is a reddit-specific branch of the Sundown Markdown parser used by GitHub, with added Python integration. Snudown has a cryptographic problem vulnerability that can be exploited by attackers to conduct DoS attacks...

6.5CVSS5.7AI score0.00193EPSS
Exploits1References3
n0where
n0where
added 2016/05/10 11:59 p.m.10 views

Modular File Scanning Analysis Framework: MultiScanner

MultiScanner is a file analysis framework that allows the user to evaluate a set of files with a set of tools. Tools can be custom built python scripts, web APIs, software running on another machine, etc. Tools are incorporated by creating modules that run in the MultiScanner framework. Modules a...

Exploits0References2
Kitploit
Kitploit
added 2015/10/19 8:54 p.m.21 views

Btproxy - Man In The Middle Analysis Tool For Bluetooth

Tested Devices Pebble Steel smart watch Moto 360 smart watch OBDLink OBD-II Bluetooth Dongle Withings Smart Baby Monitor If you have tried anything else, please let me know at conorpp at vt dot edu. Dependencies Need at least 1 Bluetooth card either USB or internal. Need to be running Linux,...

7.3AI score
Exploits0References2
CNVD
CNVD
added 2015/02/21 12:0 a.m.1 views

Gnupg2 Memory Misreference Denial of Service Vulnerability

GnuPG is a Python module that allows, from a Python program, to conveniently use the key management, encryption and signing features of GnuPG. GnuPG suffers from a memory misreference denial of service vulnerability that allows an attacker to submit a special request to crash the application...

5.5CVSS6.8AI score0.00474EPSS
Exploits0References1
Rows per page
Query Builder