74221 matches found
CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in "lxml.html.defs.linkattrs" were missing "xlink:href", which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean...
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page. The AI...
poc-inteligencia-tributaria-palmas
PoC — Inteligência Tributária de Palmas-TO !CIhttps://git...
CLSA-2026-1787220376 TuxCare security update for urllib3 (1 CVE)
TuxCare rebuilt urllib3 to address 1 CVE. Fixed in 1.25.11.post7+tuxcare...
OESA-2026-3459 python-cryptography security update
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certificate chains that...
OESA-2026-3458 python-cryptography security update
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certificate chains that...
OESA-2026-3457 python-cryptography security update
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certificate chains that...
CLSA-2026-1786223340 python: Fix of CVE-2026-11972
Re-tag base release to 94.0.5 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.7.5-94.0.5.el79...
stoq v3.0.1
Get Started Documentation Installation Plugin Repository Plugin Documentation Overview stoQ is an automation framework that helps to simplify the mundane and repetitive tasks an analyst is required to do. It enables analysts and DevSecOps teams to quickly transition between different data sources...
ProtOSINT — Updated!
ProtOSINT ProtOSINT is a Python script that helps you investigate Proton Mail accounts. Version This is ProtOSINT v2. The first version has been around for a few years, but Proton's API changed and the old checks stopped working, so this is a rewrite that brings the tool back to life. Big thanks ...
regipy v6.3.0
regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...
CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5
CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5. A patched version of the package is available...
Security update for python-unearth (important)
openSUSE security update: security update for python-unearth ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21606-1 Rating: important References: bsc1275440 Cross-References: CVE-2026-73030 Affected Products: openSUSE Leap 16.0...
CVE-2026-18287: Improper Control of Generation of Code
Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
Linuxfabrik monitoring-plugins 6.0.0 Server-Side Request Forgery
Linuxfabrik monitoring-plugins versions 6.0.0 and below suffer from a server-side request forgery vulnerability. Exploit Title: Linuxfabrik monitoringplugins6.0.0 - SSRF Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla Vendor Homepage: https://github.com/Linuxfabrik/monitoring-plugi...
CVE-2026-18286: Improper Control of Generation of Code
Aeon loadhumanactivitysegmentationdatasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
PT-2026-80724
This update for python311 fixes the following issues: - Regression in http.cookies bsc1263083...
RHEL 8 : python-urwid (RHSA-2026:57637)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57637 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +8383 more potentially affected by CVE-2026-75596 via io.netty:netty-handler (>=4.2.0.final, <=4.2.16.final)
io.netty:netty-handler MAVEN version =4.2.0.final, =0.8.0, =0.6.0, =0.4.0, =0.4.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta, =0.6.4, =0.6.4, =1.3.0-beta and more Source cves: CVE-2026-75596 Source advisory: MEND:CVE-2026-75596...