PRETty

PRETty "프린터 익스플로잇 툴킷" LAN 자동화 도구 사실 PRET을 위한 파이썬 래퍼에 불과합니다... 실제로는 그냥 for 루프예요 PRETty는 네트워크에 많은 프린터가 있을 때 유용합니다. 각 프린터를 스캔, 로깅, 수동으로 PRET을 실행하는 대신, PRETty는 자동으로 프린터를 발견하고 대상 네트워크의 모든 프린터에 대해 선택한 PRET 페이로드를 실행합니다. 또한 PRETty는 지정된 프린터 목록에 명령/페이로드를 자동으로 전달하는 데 사용할 수 있습니다 "목록" 섹션 참조 가이드: 설치 PRET 설치와 함...

apkx

apkx - 게으른 자를 위한 Android APK 디컴파일 인기 있는 무료 dex 변환기 및 Java 디컴파일러를 위한 Python 래퍼입니다. APK에서 직접 Java 소스 코드를 추출합니다. 클래스패스 설정이나 명령줄 인수를 신경 쓰지 않고 다양한 변환기/디컴파일러를 실험해 볼 때 유용합니다. 설치 $ git clone https://github.com/b-mueller/apkx $ cd apkx $ sudo ./install.sh 참고: JRE가 설치되어 있고 PATH에 설정되어 있어야 합니다. enjarify는...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu는 Libem...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 요약 tcconfig 는 tc 명령어의 래퍼입니다. 네트워크 인터페이스/Docker 컨테이너veth에 대한 네트워크 대역폭/지연/패킷 손실/패킷 손상 등의 트래픽 제어를 쉽게 설정할 수 있습니다. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL| .. |PyPI pkg ver| image:: https://badge.fury.io/py/tcconfig.svg :target:...

sleep_python_bridge

Cobalt Strike Sleep Python Bridge 이 프로젝트는 sleep 언어와 python 언어 사이의 '브리지'입니다. 표준 GUI 클라이언트 없이 Python을 통해 Cobalt Strike 팀서버를 제어할 수 있게 해줍니다. 참고: 이 프로젝트는 매우 베타 단계에 있습니다. 목표는 테스트를 위한 플레이그라운드를 제공하는 것이며, 결코 공식 지원 기능이 아닙니다. 아마도 향후 핵심 제품에 추가될 수 있는 기능일 것입니다. 이 프로젝트는 @BinaryFaultline과 @Mcgigglez16이...

CVE-2026-73217

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...

CVE-2026-73217 Cursor: Sandbox escape via tampered Python virtual environments

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...

EUVD-2026-56838

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...

PYSEC-2026-2844 OpenEXR has use after free in PyObject_StealAttrString

Summary There is a use-after-free in PyObjectStealAttrString of pyOpenEXRold.cpp. This bug was found with ZeroPath. Details The legacy adapter defines PyObjectStealAttrString that calls PyObjectGetAttrString to obtain a new reference, immediately decrefs it, and returns the pointer. Callers then...

[SECURITY] Fedora 44 Update: python-fastar-0.11.0-7.fc44

The fastar library wraps the Rust tar, flate2, and zstd crates, providing a high-performance way to work with compressed and uncompressed tar archives in Python...

AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability:An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

PYSEC-2026-1205 AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

Descriptionllama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUMA, LoRa settings, loading tokenizers, and...

GHSA-57CW-J6VP-2P9M OpenEXR has use after free in PyObject_StealAttrString

Summary There is a use-after-free in PyObjectStealAttrString of pyOpenEXRold.cpp. This bug was found with ZeroPath. Details The legacy adapter defines PyObjectStealAttrString that calls PyObjectGetAttrString to obtain a new reference, immediately decrefs it, and returns the pointer. Callers then...

CVE-2026-27459

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to setcookiegeneratecallback returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0....

[SECURITY] Fedora 42 Update: python-apt-3.1.0-1.fc42

python-apt is a wrapper to use features of APT from Python...

Privilege Escalation

awsadvancedpythonwrapper is vulnerable to Privilege Escalation. The vulnerability is due to improper execution context handling of user-defined functions, which allows an attacker to create crafted functions that execute with elevated privileges and gain unauthorized access...

Uncontrolled Search Path Element

Overview awsadvancedpythonwrapper is an Amazon Web Services AWS Advanced Python Driver Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker can execute malicious...

AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

GHSA-4JVF-WX3F-2X8Q AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...