74143 matches found
CVE-2026-75062
Google langfun versions prior to 0.1.2 are vulnerable to Eval Injection in the default lf.query Python protocol. Crafted prompt inputs can cause the language model to generate executable Python expressions that are evaluated without a sandbox , allowing a remote unauthenticated attacker to execut...
CVE-2026-75062 Eval Injection in google/langfun via default lf.query protocol
Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt...
CVE-2026-75062
Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt...
Exploit for CVE-2026-19914
cve-id Donate Help maintain this project...
CVE-2026-55620
A flaw was found in emlparser, a Python module designed for parsing email files. A remote attacker can exploit a vulnerability in how the module processes Received: headers containing deeply nested parentheses. By submitting specially crafted email files, an attacker can cause excessive CPU usage...
CVE-2026-55619
A flaw was found in emlparser, a Python module for parsing email files. A remote attacker can exploit this vulnerability by sending a specially crafted email containing deeply nested comments within its headers. This malicious input can exhaust the parser's call stack, leading to a RecursionError...
Exploit for Code Injection in Pgadmin Pgadmin_4
CVE-2025-2945 — pgAdmin 4 Authenticated Query Tool RCE CVSS...
UBUNTU-CVE-2026-80205
NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a Regular Expression Denial of Service vulnerability due to Python idna library
Summary The idna library is used by IBM Integrated Analytics System as a Python library for Internationalized Domain Names in Applications IDNA encoding and decoding. CVE-2026-45409 affects idna versions prior to the fix, where the idna.encode function is vulnerable to Regular Expression Denial o...
CVE-2026-80205 NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...
CVE-2026-80205
NLTK versions before 3.10.0 are vulnerable to a ReDoS (Regular Expression Denial of Service) in the Text.findall() and TokenSearcher.findall() methods. These methods accept user-supplied regular expressions without validation or a timeout mechanism, allowing an attacker to supply crafted patterns...
RHSA-2026:59409 Red Hat Security Advisory: python-urllib3 security update
Bulletin has no description...
mikrot8over
mikrot8over mikrot8over: strumento di sfruttamento rapido per Mikrotik RouterOS fino alla versione 6.38.4 Descrizione Questa è una rielaborazione dell'originale Mikrotik Exploit. Sono state aggiunte la compatibilità con Python 2 e funzionalità di scansione multithreading. Versione Python L'utilit...
CLSA-2026-1787718630 TuxCare security update for pillow (3 CVEs)
TuxCare rebuilt pillow to address 3 CVEs. Fixed in 10.4.0.post6+tuxcare...
[SECURITY] Fedora 44 Update: python-tablib-3.10.0-1.fc44
Tablib is a format-agnostic tabular dataset library, written in Python...
[SECURITY] Fedora 44 Update: python3.10-3.10.21-1.fc44
Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...
[SECURITY] Fedora 43 Update: python-tablib-3.10.0-1.fc43
Tablib is a format-agnostic tabular dataset library, written in Python...
[SECURITY] Fedora 43 Update: python3.10-3.10.21-1.fc43
Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...
[SECURITY] Fedora 43 Update: python3.11-3.11.16-1.fc43
Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...