monty

Monty Минимальный, безопасный интерпретатор Python, написанный на Rust для использования ИИ...

pyMalleableC2

pyMalleableC2 Интерпретатор Python для профилей Malleable C2 от Cobalt Strike, который позволяет программно разбирать, изменять, создавать их и проверять синтаксис. Поддерживает всю грамматику профилей Malleable C2 от Cobalt Strike, начиная с версии 4.3. Он не обратно совместим с предыдущими...

CVE-2024-48990

CVE-2024-48990 !WARNING Эти файлы и информация предназначены только для образовательных целей. Автор не несет ответственности за любые злонамеренные действия. Вся предоставленная информация не предназначена для подстрекательства к каким-либо преступлениям или злоупотреблениям. Описание Qualys...

CVE-2024-48990-PoC

CVE-2024-48990-PoC needrestart란 무엇이며 어떻게 작동하나요? Needrestart는 리눅스 시스템에서 널리 사용되는 유틸리티로대부분의 Ubuntu 버전에서 기본 탑재, 소프트웨어 업데이트 후 서비스나 시스템 자체를 다시 시작해야 하는지 확인합니다. 실행 중인 프로세스를 분석하여 업데이트된 라이브러리를 사용하고 있는지, 또는 변경 사항을 적용하기 위해 재시작이 필요한지 판단합니다. 취약점은 어떻게 작동하나요? Needrestart가 Python 인터프리터를 실행하는 프로세스를 감지하면,...

CVE-2024-48990

Эксплойт CVE-2024-48990 Локальное повышение привилегий в needrestart 3.8 через внедрение PYTHONPATH. Как это работает 1. needrestart выполняется от root и сканирует все процессы 2. Находит наш процесс Python, читает PYTHONPATH=/tmp/.m из /proc/pid/environ 3. Запускает Python от root с нашим...

CVE-2024-48990

CVE-2024-48990 and CVE-2024-48992 Per determinare se un processo Python un processo che esegue l'interprete Python necessita di essere riavviato, needrestart estrae la variabile d'ambiente PYTHONPATH dal file /proc/pid/environ di questo processo alla riga 193, imposta questa variabile d'ambiente ...

CVE-2024-48990

CVE-2024-48990 POC Panoramica Qualys ha scoperto che needrestart, prima della versione 3.8, consente ad attaccanti locali di eseguire codice arbitrario come root ingannando needrestart, facendogli eseguire l'interprete Python con una variabile d'ambiente PYTHONPATH controllata dall'attaccante...

Fedora 43 : python3.11 (2026-22170bd5c0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22170bd5c0 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

The vulnerability of the Python programming language interpreter, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

CVE-2026-13435 Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

CVE-2026-14499

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

CVE-2026-14499

CVE-2026-14499 affects Langflow OSS 1.0.0–1.10.1. An authenticated user could execute arbitrary commands with elevated privileges due to improper validation of user-supplied input in the Python Interpreter component, resulting in OS command injection (CWE-78). IBM’s bulletin assigns CVSS v3.1 bas...

CVE-2026-14499

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

CVE-2026-14499 Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...

PT-2026-60873

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An authenticated user can execute arbitrary commands with elevated privileges on the system. This occurs due to improper validation of user-supplied input within the Python Interpreter...

The vulnerability of the base64.b64decode() function in the Python programming language interpreter (CPython) allows a attacker to compromise the integrity of protected information.

The vulnerability of the base64.b64decode function in the Python programming language interpreter CPython is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

The vulnerability of the webbrowser module in the CPython interpreter allows a hacker to execute arbitrary commands.

The vulnerability of the webbrowser module in the CPython interpreter is related to the lack of measures taken to protect data at the operating level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

ROS-20260713-73-0024

The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...