962 matches found
tcconfig
.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...
prowler
Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...
aura
.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Source code auditing and static code analysis Aura is a static analysis framework developed as a...
heaphopper
heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopper pip install ...
Pip-Intel
🌐PIP-INTEL - OSINT and Cyber Intelligence Tool🌐 Tested: Kali-Linux Pip-Intel is a powerful tool designed for OSINT Open Source Intelligence and cyber intelligence gathering activities. It consolidates various open-source tools into a single user-friendly interface simplifying the data collection...
pip-audit
pip-audit pip-audit は、既知の脆弱性を持つパッケージをスキャンするためのPython環境向けツールです。脆弱性レポートのソースとして、PyPI JSON APIを介してPython Packaging Advisory Database https://github.com/pypa/advisory-databaseを利用します。 このプロジェクトは、Trail of Bits と Google の支援により部分的にメンテナンスされています。これはGoogleまたはTrail of Bitsの公式製品ではありません。 Index Features...
AuraBorealisApp
AuraBorealis: Do You Know What's In Your Python Packages? About AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis...
advisory-database
Python 打包安全公告数据库 这是一个社区拥有的仓库，用于存放发布在 https://pypi.org 上的软件包的安全公告。 安全公告存放在 vulns 目录中，采用 简单格式 的 YAML 编码。 贡献安全公告 提交拉取请求 现有条目可以通过简单地创建拉取请求来编辑。 要引入新条目，请创建一个拉取请求，其中包含一个名称匹配 PYSEC-0000-.yaml 的新文件。合并后，自动化工具将分配一个正式的 ID。 您可以通过运行以下命令来验证 YAML 文件的结构： pipx run check-jsonschema --schemafile...
GHSA-6R2R-WW24-7H52 vulnerabilities
Vulnerabilities for packages: checkov, mlflow, awx, opal, datahub-ingestion, datahub-ingestion-fips...
GHSA-7JX3-JQCP-HHGC vulnerabilities
Vulnerabilities for packages: mlflow, awx, checkov, opal...
GHSA-5CC2-282F-JJQ2 vulnerabilities
Vulnerabilities for packages: keep, datadog-agent-fips, keep-fips, mlrun, mlrun-fips, airflow, datadog-agent...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1995)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1995 advisory. The incremental HTML parser html.parser.HTMLParser allows for CPUdenial-of-service through repeated unterminated markup declarations whenprocessing uncontrolled data. CVE-2026-15308 In the...
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
Malicious code in catalogai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb9ff2c71a85c2bac770a874ed3c811e963ba9b3da37417fb600678d8119991 catalogai 0.1.2 presents itself as a semantic-search / AI-catalog library but the shipped modules perform browser credential theft and...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1933)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1933 advisory. The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result ...