Lucene search
K

141 matches found

Packet Storm
Packet Storm
added 2 days ago20 views

📄 Espanso 2.3.0 Configuration Injection

This Python script is a configuration manipulation tool for Espanso version 2.3.0 that modifies its YAML configuration file base.yml to add new text triggers capable of executing system commands via shell or script extensions...

5.7AI score
Exploits0
GithubExploit
GithubExploit
added 2026/05/24 1:13 p.m.50 views

sql-injection

sql-injection python tool that...

5.9AI score
Exploits0
GithubExploit
GithubExploit
added 2026/05/18 11:28 a.m.49 views

search-cve

Intelligence Engine A lean Python CLI that aggregates CVE i...

5.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/05/14 7:58 p.m.4 views

CVE-2026-45227

Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using object-graph introspection primitives. Attackers can use Python introspection techniques to recover the unrestricted...

8.8CVSS6.1AI score0.0005EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.8 views

PT-2026-40452

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.21 Description A sandbox escape exists in the custom Python tool executor. Authenticated workflow authors can bypass sandbox restrictions using object-graph introspection primitives. By employing Python introspection...

8.8CVSS6AI score0.0005EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.3 views

Heym 安全漏洞

Heym is an open-source AI-native workflow automation platform developed by heymrun. Versions of Heym prior to 0.0.21 contained security vulnerabilities. These vulnerabilities stemmed from sandbox escape vulnerabilities in custom Python tool executors, which could allow authenticated workflow...

8.8CVSS5.8AI score0.0005EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/05/08 7:45 a.m.40 views

Exploit for CVE-2020-1938

Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerabilit...

9.8CVSS7.2AI score0.94469EPSS
Exploits44
GithubExploit
GithubExploit
added 2026/05/05 8:27 p.m.53 views

Exploit for Improper Authentication in Microsoft

CVE-2026-26128 !Examplehttps://github.com/jarnovandenbrink/...

7.8CVSS5.9AI score0.00074EPSS
Exploits1
Packet Storm News
Packet Storm News
added 2026/04/27 12:0 a.m.6 views

Selenium Grid 4.11.0 Selenoid Backend Detection and Safe Session Validation Inspector

The provided Python script is a non-exploit reconnaissance and validation tool designed to identify Selenium Grid or Selenoid deployments exposed via HTTP APIs...

5.2AI score
Exploits0
GithubExploit
GithubExploit
added 2026/04/16 1:17 p.m.71 views

python-vulnerability-scanner

Python Web Vulnerability Scanner This project is a simple Pyt...

5.8AI score
Exploits0
Fedora
Fedora
added 2026/04/09 3:22 a.m.1 views

[SECURITY] Fedora 43 Update: python-pydicom-3.0.2-1.fc43

pydicom is a pure python package for working with DICOM files. It was made for inspecting and modifying DICOM data in an easy "pythonic" way. The modifications can be written again to a new file. pydicom is not a DICOM server, and is not primarily about viewing images. It is designed to let you...

7.8CVSS5.9AI score0.00008EPSS
Exploits1
GithubExploit
GithubExploit
added 2026/04/02 2:29 p.m.59 views

AARTF---Autonomous-AI-RedTeam-Framework

AARTF AI-Driven Autonomous Security Workflow !CIhttps:/...

6.1AI score
Exploits0
Fedora
Fedora
added 2026/03/29 12:51 a.m.2 views

[SECURITY] Fedora 43 Update: python-ply-3.11-33.fc43

PLY is a straightforward lex/yacc implementation. Here is a list of its essential features: It is implemented entirely in Python. It uses LR-parsing which is reasonably efficient and well suited for larger grammars. PLY provides most of the standard lex/yacc features including support for empty...

9.8CVSS7.3AI score0.00846EPSS
Exploits3
GithubExploit
GithubExploit
added 2026/03/28 11:7 a.m.103 views

Sentinel-Web-Scanner

Sentinel-Web-Scanner...

5.9AI score
Exploits0
CNNVD
CNNVD
added 2026/03/27 12:0 a.m.2 views

WindMill 代码注入漏洞

WindMill is a free open-source tool developed by Lukasavicus’ individual developer. It is used to control the execution of tasks in Python. Versions of WindMill prior to 1.664.0 contained a code injection vulnerability. This vulnerability occurred when JavaScript string literals were inserted int...

8.6CVSS6.1AI score0.00074EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2026/03/26 11:16 a.m.133 views

Exploit for CVE-2026-3891

⚠️ CVE-2026-3891 - Test Pix for WooCommerce Security !Downl...

9.8CVSS6AI score0.00082EPSS
Exploits5
OSV
OSV
added 2026/03/18 10:16 p.m.0 views

DEBIAN-CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

6.1CVSS5.6AI score0.00022EPSS
Exploits2References1
GithubExploit
GithubExploit
added 2026/03/09 6:31 p.m.94 views

web-vulnerability-scanner

Web Vulnerability Scanner This project is a simple Python too...

5.8AI score
Exploits0
GithubExploit
GithubExploit
added 2026/03/04 1:34 p.m.108 views

Exploit for CVE-2016-10555

██╗██╗ ██╗████████╗ ███████╗ ██████╗ ██████╗ ███...

6.5CVSS6.1AI score0.81652EPSS
Exploits2
Packet Storm News
Packet Storm News
added 2026/02/19 12:0 a.m.2 views

Python Safe TAR Scanner

This Python tool provides a scanner for TAR archives, designed to detect unsafe or malicious entries before extraction...

5.5AI score
Exploits0
Rows per page
Query Builder