ROOT-OS-UBUNTU-2204-CVE-2025-8194 CVE-2025-8194 in python3.11 - Patched by Root

Root has patched CVE-2025-8194 in the python3.11 package for Root:Ubuntu:22.04. Multiple fixed versions available...

aardwolf

🚩 Sponsor Se ti piace questo progetto, valuta l'acquisto di licenze di OctoPwn, la nostra suite completa di pentesting che gira nel tuo browser! Per notifiche su nuove build/versioni e altre informazioni, unisciti al nostro Discord AARDWOLF - Client RDP/VNC asincrono in Python headless Questo...

ghidra_stack_strings

Ghidra Stack-strings A script to detect stack-strings written by the selected x86/x64 instructions, emulated using Unicorn. The script is written in Python 3, so it needs Ghidrathon...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in recent security patch releases. Vulnerability Details CVEID:CVE-2026-47063 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java...

DeTTECT

Detect Tactics, Techniques & Combat Threats Latest version: 2.2.0 To get started with DeTT&CT, check out one of these resources: This page on the Wiki. This blog written by Renaud Frère from NVISO has a comprehensive and recent description on the capabilities of DeTT&CT. Blog:...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS Unauthenticated RCE via Auto-Login Bypass 📋 Overview CVE-2026-9198 is a critical unauthenticated Remote Code Execution RCE vulnerability in IBM Langflow OSS. This exploit chains two vulnerabilities: CVE-2026-9103 : Auto-login bypass that grants superuser JWT token...

dissect.cobaltstrike

Dissecting Cobalt Strike using Python .. image:: https://github.com/fox-it/dissect.cobaltstrike/actions/workflows/dissect-ci.yml/badge.svg :target: https://github.com/fox-it/dissect.cobaltstrike/actions/workflows/dissect-ci.yml :alt: GitHub Actions status .. image::...

ioc-finder

IOC Finder Parse indicators of compromise also known as "observables" or "network data" - e.g. urls, email addresses, etc from text. 📖 Documentation it's interactive! 💪 I'm looking for sponsorship for this project. I have a number of improvements and helpful features I'd like to add and would...

Citadel

Introduction Citadel is a collection of various scripts for pentest-related tasks. List of scripts included vars.zsh msfresourcescripts dnsdump.py fileinfo.zsh fileserver.py opcodes.zsh stackpush.zsh sslconvert.zsh gitdownload.zsh cardmon.zsh powershellcmdstager.py sfparser.py xmltojson.py...

powerview.py

Installation | Basic Usage | Obfuscation | Modules | Logging | User Defined Rules | MCP | Plugins | Acknowledgements Overview PowerView.py is an alternative for the awesome original PowerView.ps1 script. Most of the modules used in PowerView are available here some of the flags are changed . Main...

enterpriseattack

enterpriseattack - MITRE's Enterprise ATT&CK® A lightweight Python module to interact with the MITRE ATT&CK Enterprise dataset. Built to be used in production applications due to it's speed and minimal depedancies. Read the docs for more info. MITRE ATT&CK® MITRE ATT&CK® is a globally-accessible...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Command Injection via Git URL in CI/CD Pipeline Program Code Python cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repourl /tmp/repo"...

python-inquestlabs

RETIRED November 2025 inquestlabs A Pythonic interface and command line tool for interacting with the InQuest Labs API. Note that an API key is not required to interact with this API. An API key does provide the ability to increase their lookback, remove rate limitations, and download available...

CVE-2026-33718

CVE-2026-33718 OpenHands is Vulnerable to Command Injection through its Git Diff Handler Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker...

K000163622: Python vulnerability CVE-2026-7210

Security Advisory Description xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and...

bochscpu-python

bochscpu-python Python bindings for @yrp's BochsCPU using FFI to easily and accurately emulate x86 code. Install bochscpu-python requires a Python environment of 3.8 or more recent only. Via PyPI preferred By far the simplest way to get things up and running is using the stable packaged version o...

GPOCrack

GPOCRACK.py Active Directory Group Policy Preferences cpassword cracker/decrypter. How to use python2 gpocrack.py cGc4817iMQclr1Ssixv35UpaH/FXy+1s5FnM2RqD4BI...

wafparan01d3

Quick WAF "paranoid" Doctor Evaluation WAFPARAN01D3 The Web Application Firewall Paranoia Level Test Tool. — Fromalt3kx.github.io -blue.svg Introduction to Paranoia Levels In essence, the Paranoia Level PL allows you to define how aggressive the Core Rule Set is. Reference:...

msiscan

MSI Analyzer This Python script for Linux can analyze Microsoft Windows .msi Installer files and point out potential vulnerabilites. It was developed by Michael Baer @derbaer0 in the SEC Consult Vulnerability Lab. Currently, it is mostly suited for a local privilege escalation also described in o...

CVE-2023-27350

CVE-2023-27350 Python 2.7 Buy Coffee : Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money $: U22270614 Reff : https://nvd.nist.gov/vuln/detail/CVE-2023-27350 Shodan Dork http.html:"papercut" http.html:"papercut" port:9191 http.title:"PaperCut Login"...