CVE-2026-57179

Python Social Auth is a social authentication/registration mechanism...

ALSA-2026:71586 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

UBUNTU-CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

UBUNTU-CVE-2026-57179

Python Social Auth is a social authentication/registration mechanism...

CVE-2026-57178

Python Social Auth is a social authentication/registration mechanism...

ALSA-2026:71658 Important: python-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

CVE-2026-57176

Python Social Auth is a social authentication/registration mechanism...

CVE-2026-57177

Python Social Auth is a social authentication/registration mechanism...

CVE-2022-21661

WordPress CVE-2022-21661 スキャナー 使い方 root@kitploit: python wordpressscanner.py -H -p -ssl -proxy -path ヘルプ root@kitploit: WordPress Scanner for CVE-2022-21661 options: -h, --help show this help message and exit -H HOST, --host HOST Host or IP address -p PORT, --port PORT Port number -ssl,...

CVE-2026-23744

CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...

CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

DEBIAN-CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

CVE-2024-48990-PoC-Testing

CVE-2024-48990-PoC-Testing 🐍🔓 このリポジトリには、needrestart プログラムの脆弱性を実証するための概念実証 PoC が含まれています。この脆弱性は Python のパスを正しく設定しないため、潜在的な権限昇格につながります。この PoC は、この欠陥を悪用して昇格した権限を取得する潜在的な経路を示しています。 ⚠️ 脆弱性の概要 CVE-2024-48990 脆弱性は、needrestart パッケージ内に存在します。具体的には、Python...

CVE-2026-59980

A flaw was found in hpack, an HTTP/2 Header Encoding for Python. Unbounded variable integer decoding can lead to excessive computation when processing specially crafted, malformed input. A remote attacker could exploit this vulnerability to cause a denial of service by effectively blocking furthe...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE エクスプロイト Python CLI エクスプロイト for CVE-2025-55182。これは、react-server-dom-webpack を介した React Server Components の重大な RCE 脆弱性です。 ベース: ejpir/CVE-2025-55182-poc クイックスタート Docker テスト root@kitploit: Unpack src.zip zip -r src.zip src Build and run vulnerable containe...

ReconHound

ReconHound ReconHoundは、ペネトレーションテスター、バグバウンティハンター、そして倫理的ハッカーのために作られたPythonベースのWeb偵察ツールです。隠されたパス、ファイル、サブドメイン、クエリパラメータ、仮想ホスト、ファズ可能なエンドポイントを特定するのに役立ち、深層Web偵察のための多用途なソリューションです。 Features 高速なWeb列挙のためのマルチスレッドスキャン サポート: ディレクトリおよびファイルの発見 サブドメイン列挙 Hostヘッダーを介した仮想ホスト検出 クエリパラメータファジング...

CVE-2026-59980

The python-hyper/hpack library, often used as a dependency for the python-hyper/h2 HTTP/2 implementation, is vulnerable to run-away computation due to unbounded variable integer decoding . Malformed input can trigger an O(n^2) runtime, potentially blocking further processing. A fix is available i...

CVE-2026-59980 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

CVE-2026-59980 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...