BabyShark

INTRODUCCIÓN Este es un servidor C2 genérico básico escrito en Python y Flask. Este código tiene la idea base de GTRS, que utiliza Google Translator como proxy para enviar comandos al host infectado. El proyecto BabyShark tiene como objetivo centralizar conexiones inversas con agentes, creando un...

SucoshScanny

Sucosh Scanny "Sucosh" es un escáner automatizado de vulnerabilidades de código fuente SAST y un marco de evaluación para Python Flask-Django y NodeJs, capaz de realizar revisiones de código en procesos de desarrollo de aplicaciones web o análisis de código fuente. Puede detectar muchas...

Scrummage

Scrummage VERSIÓN 3.9 Mejora en la gestión de dependencias migración a Poetry Verificación de tipos más estricta de variables. Mejora del anonimato del archivo de configuración mediante cifrado. Ahora es difícil editar manualmente el archivo de configuración y se recomienda no editarlo manualment...

vulpy

Vulpy - Laboratorio de Seguridad de Aplicaciones Web Vulpy es una aplicación web desarrollada en Python / Flask / SQLite que tiene dos caras. BUENO : Intenta codificar con las mejores prácticas de desarrollo seguro en mente. MALO : Intenta codificar como posiblemente tú. :p Está desarrollado como...

Python Flask-Security - Open Redirect

Python Flask-Security contains an open redirect vulnerability. Existing code validates that the URL specified in the next parameter is either relative or has the same network location as the requesting URL. Certain browsers accept and fill in the blanks of possibly incomplete or malformed URLs. A...

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Riferimento diretto non sicuro a oggetti con UUIDv1 prevedibile Codice del programma Python Flask root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + M...

linux-explorer

Dieses Projekt wird nicht mehr gewartet! Linux Expl0rer Einfach zu bedienende Live-Forensik-Toolbox für Linux-Endpunkte, geschrieben in Python & Flask. Funktionen ps Vollständige Prozessliste anzeigen Prozess-Speicherzuordnung inspizieren und Speicherstrings einfach abrufen Prozessspeicher mit...

flask_heroku_redirector

Flask Heroku C2 Esempio Una semplice applicazione di esempio Python Flask pronta per essere eseguita su Heroku. Configurazione per lo sviluppo virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Deploy heroku create git push heroku master...

CVE-2026-46556

FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery SSRF vulnerability in getimageinfo allows any authenticated user to force the server to send HTTP requests to arbitrary internal endpoints, including cloud metadata...

Security update for python-Flask (moderate)

openSUSE security update: security update for python-flask ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20885-1 Rating: moderate References: bsc1258700 Cross-References: CVE-2026-27205 CVSS scores: CVE-2026-27205 SUSE : 6.5...

SUSE-SU-2026:22023-1 Security update for python-Flask

This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...

OPENSUSE-SU-2026:20885-1 Security update for python-Flask

This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the Vary: Cookie header bsc1258700...

[SECURITY] [DLA 4605-1] python-flask-httpauth security update

Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias May 28, 2026 https://wiki.debian.org/LTS Package : python-flask-httpauth Version : 3.2.4-3.1+deb11u1 CVE ID : CVE-2026-34531 Debian Bug : 1132581 A vulnerability was found in...

Debian dla-4605 : python-flask-httpauth-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4605 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4605-1 [email protected] https://www.debian.org/lts/security/...

CoreExploit-Final

CoreExploit 🔐 Ethical Penetration Testing Learning Platfor...

vulnerability-lab

🔐 Vulnerability Lab Buffer Overflow + SQLi ⚠️ FOR EDUCATI...

Fedora 44 : python-flask-httpauth (2026-fd53570465)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fd53570465 advisory. Update to version 4.8.1 2454342 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora: Security Advisory (FEDORA-2026-04d6f223e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2026:20576-1 Security update for python-Flask-HTTPAuth

This update for python-Flask-HTTPAuth fixes the following issues: Changes in python-Flask-HTTPAuth: - CVE-2026-34531: Do not accept empty tokens bsc1261355...

Security update for python-Flask-HTTPAuth (moderate)

openSUSE Security Update: Security update for python-Flask-HTTPAuth Announcement ID: openSUSE-SU-2026:0122-1 Rating: moderate References: 1261355 Cross-References: CVE-2026-34531 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description:...