Web-Server-Log-Parser-Threat-Detector

Log threat detector A lightweight Python security tool that pa...

taser v0.5.1

Taser TASER Testing and Security Resource is an abstraction library used to simplify the process of creating offensive security tooling. The various protocols and classes help streamline development of custom tooling during engagements. The examples directory contains a number of scripts...

PT-2026-65659

Summary datamodel-code-generator honours a custom x-python-type JSON-Schema extension that lets a schema author override the generated Python type for a field. The value is forwarded verbatim into the generated Python source as the field annotation, with a single sanitisation pass that is trivial...

CVE-2026-54691: Server-Side Request Forgery (SSRF)

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

CVE-2026-54653: Improper Control of Generation of Code

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.17.0 until 0.60.2, datamodel-code-generator preserves attacker-controlled defaultfactory values in...

SUSE SLED15 / SLES15 Security Update : python-Pillow (SUSE-SU-2026:3268-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3268-1 advisory. - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. -...

ROS-20260728-73-0021

The vulnerability in python-PyPDF2 is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260728-73-0018

The vulnerability in python-PyPDF2 is related to errors in processing XML entities. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Security update provided to RLSA-2026:1478 and Rocky Linux Security Update for libpng (RLSA-2026:0238)

Brocade SANnav OVA has provided Security updates for python3.9 RLSA-2026:1478 and Rocky Linux Security Update for libpng RLSA-2026:0238 python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service CVE-2025-12084 Rocky Linux Security Update for libpng RLSA-2026:0238 libpng:...

CVE-2026-55415: Improper Control of Generation of Code

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows attacker-controlled x-python-import or customTypePath schema...

ROS-20260728-73-0022

The vulnerability in python-PyPDF2 is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Rocky Linux Security Update for kernel, libssg, gnupg2, python3.9 & tar

Brocade SANnav OVA has provided Security updates for the following vulnerabilities. Rocky Linux 9 : Security Update for python3.9 RLSA-2026:1478 cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service CVE-2025-12084 Rocky Linux Security Update for kernel RLSA-2025:22865 kernel:...

Linux Distros Unpatched Vulnerability : CVE-2026-66053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are...

SUSE SLED15 / SLES15 Security Update : python-soupsieve (SUSE-SU-2026:3239-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3239-1 advisory. This update for python-soupsieve fixes the following issues - CVE-2026-49476: Memory Exhaustion via Large...

python313-CherryPy-18.10.0-4.1 on GA media (moderate)

python313-CherryPy-18.10.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11378-1 Rating: moderate Cross-References: CVE-2019-9740 CVSS scores: CVE-2019-9740 SUSE : 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...

PT-2026-65670

Summary datamodel-code-generator is vulnerable to code injection when a developer passes an --extra-template-data file whose comment value contains a literal r carriage return. The comment variable is rendered into a Python comment in six built-in templates with no line-terminator escaping...

CVE-2026-54654: Improper Control of Generation of Code

datamodel-code-generator generates Python data models from schema definitions. From 0.14.1 until 0.60.2, the --extra-template-data comment field is rendered into Python comments in src/datamodelcodegenerator/model/template/TypeAliasAnnotation.jinja2,...

CVE-2026-54621: Improper Control of Generation of Code

datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodelcodegenerator/model/template/UnionTypeStatement.jinja2 and src/datamodelcodegenerator/model/template/UnionTypeStatement.py312.jinja2 are rendered into...

PT-2026-65606

Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.14.1 through 0.60.1 Description Code injection is possible when the --extra-template-data file contains a comment value with a carriage return r. The software renders this comment variable into Python commen...

SUSE SLED15 / SLES15 Security Update : python-pyasn1 (SUSE-SU-2026:3238-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3238-1 advisory. - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. -...