CVE-2024-48990

CVE-2024-48990 익스플로잇 needrestart 3.8 버전에서 PYTHONPATH 인젝션을 통한 로컬 권한 상승 작동 방식 1. needrestart가 root로 실행되며 모든 프로세스를 스캔합니다. 2. 우리의 Python 프로세스를 찾아 /proc/pid/environ에서 PYTHONPATH=/tmp/.m을 읽습니다. 3. 우리의 악성 PYTHONPATH를 사용하여 Python을 root로 실행합니다. 4. Python의 import가 /tmp/.m/importlib/init.so 우리의 악성 라이브러리를...

pyMalleableC2

pyMalleableC2 Интерпретатор Python для профилей Malleable C2 от Cobalt Strike, который позволяет программно разбирать, изменять, создавать их и проверять синтаксис. Поддерживает всю грамматику профилей Malleable C2 от Cobalt Strike, начиная с версии 4.3. Он не обратно совместим с предыдущими...

monty

Monty AIが使用するための、Rustで書かれた最小限で安全なPythonインタープリター。 実験的 - このプロジェクトはまだ開発中であり、本番環境での使用には耐えられません。 AIが使用するための、Rustで書かれた最小限で安全なPythonインタープリター。 Montyは、LLMが生成したコードを実行するために完全なコンテナベースのサンドボックスを使う際のコスト、レイテンシ、複雑さ、そして一般的な手間を回避します。 その代わりに、エージェントに組み込まれたLLMが書いたPythonコードを安全に実行できます。起動時間は数百ミリ秒ではなく、一桁マイクロ秒単位です。...

CVE-2024-48990

CVE-2024-48990 !WARNING 이 파일과 정보는 교육 목적으로만 제공됩니다. 저자는 어떠한 악의적인 행위에 대해서도 책임을 지지 않습니다. 제공되는 모든 정보는 어떠한 종류의 범죄나 악용을 선동하기 위한 것이 아닙니다. 설명 Qualys는 needrestart 3.8 이전 버전에서 로컬 공격자가 공격자가 제어하는 PYTHONPATH 환경 변수로 Python 인터프리터를 실행하도록 needrestart를 속여 루트 권한으로 임의 코드를 실행할 수 있음을 발견했습니다. 공식 세부 정보는 NIST에서 확인하세요. PoC...

CVE-2024-48990-PoC

CVE-2024-48990-PoC needrestartとは何か、どのように動作するのか？ needrestartは、Linuxシステム（多くのUbuntuバージョンでデフォルト）で広く使われているユーティリティで、ソフトウェア更新後にサービスやシステム自体を再起動する必要があるかどうかをチェックします。実行中のプロセスを分析することで、それらが更新されたライブラリを使用しているかどうか、あるいは変更を反映するために再起動が必要かどうかを判定します。 この脆弱性はどのように動作するのか？...

CVE-2024-48990

CVE-2024-48990 POC 개요 Qualys는 needrestart가 버전 3.8 이전에서 로컬 공격자가 Python 인터프리터를 공격자가 제어하는 PYTHONPATH 환경 변수로 실행하도록 속여 루트 권한으로 임의 코드를 실행할 수 있음을 발견했습니다. 이 저장소는 CVE-2024-48990 에 대한 개념 증명PoC 익스플로잇 을 포함하고 있습니다. 취약점 요약 CVE ID: CVE-2024-48990 영향을 받는 구성 요소: needrestart 취약점 유형: 로컬 권한 상승 공격 벡터: 로컬 영향: 루트로 권한 상...

CVE-2024-48990

CVE-2024-48990 및 CVE-2024-48992 Python 프로세스즉, Python 인터프리터를 실행 중인 프로세스의 재시작 필요 여부를 확인하기 위해, needrestart는 이 프로세스의 /proc/pid/environ에서 PYTHONPATH 환경 변수를 추출하고193행, 해당 변수가 존재하면 설정한 후196행, "-" 인자를 사용하여 Python"$ptable-exec", 203행을 실행하여 stdin204행에서 짧고 하드코딩된 스크립트를 읽습니다: """ perl 135 sub files 136 my $sel...

[SECURITY] Fedora 43 Update: python3.10-3.10.21-1.fc43

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

Fedora 43 : python3.11 (2026-22170bd5c0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22170bd5c0 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Astra Linux – Vulnerability found in Python 3.11, Python 2.7, and Python 3.7

There is a medium-severity vulnerability affecting CPython. The email module does not properly quote newlines for email headers when serializing an email message, allowing for header injection when an email is serialized...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

The vulnerability of the Python programming language interpreter, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

CVE-2026-13435 Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

CVE-2026-14499

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

CVE-2026-14499

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

CVE-2026-14499

CVE-2026-14499 affects Langflow OSS 1.0.0–1.10.1. An authenticated user could execute arbitrary commands with elevated privileges due to improper validation of user-supplied input in the Python Interpreter component, resulting in OS command injection (CWE-78). IBM’s bulletin assigns CVSS v3.1 bas...

CVE-2026-14499 Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

PT-2026-60873

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An authenticated user can execute arbitrary commands with elevated privileges on the system. This occurs due to improper validation of user-supplied input within the Python Interpreter...

The vulnerability of the webbrowser module in the CPython interpreter allows a hacker to execute arbitrary commands.

The vulnerability of the webbrowser module in the CPython interpreter is related to the lack of measures taken to protect data at the operating level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...