NPM: CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

NPM: CodeWhale: rlmeval auto-approves arbitrary Python execution, bypassing the user's approval policy RCE vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.33, 0.8.41...

INSTA_CYBER

Instagram-Hacker This is a script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL! 🌐 Instagram-Hacker 🔐 A Bruteforce Attack Script for Educational & Ethical Hacking Purposes Only ⚠️ DISCLAIMER 🚨 This tool is for educational and ethical testing purposes ONLY. The misuse of this script...

fabric-spark-custom-wheel-poc

Microsoft Fabric Spark custom-wheel POC !CIhttps://github...

CVE-2026-85694

LaVague 0.2.35 is vulnerable to remote code execution via its PythonFromMarkdownExtractor.extract_as_object function, which uses eval on untrusted language model output derived from web page content. An attacker can perform indirect prompt injection through a web page to inject malicious Python c...

PhoneSploit-Pro v2.3

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

noxious

NOXIOUS — Buffer Overflow Exploit Toolkit & Ağ Sızma Testi Ara...

ae-mcp (0.2.0), analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0) +31 more potentially affected by CVE-2026-85525 via snowflake-connector-python (>=4.0.0, <=4.7.2)

snowflake-connector-python PYPI version =4.0.0, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.1.0, =1.10.7, =1.2.1, =2.79.1a0, =3.0.0, =3.0.1.post1 - klondike 0.3.0 and more Source cves: CVE-2026-85525 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-19638983...

Improper Certificate Validation

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Improper Certificate Validation in the OCSP processing functionality, which accepts an OCSP response without checking that its CertID matches the certificate being validated...

CVE-2026-79707 Arbitrary File Read in Google Agent Development Kit (ADK)

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

EUVD-2026-70994

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:3978-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...

oxo v2.9.29

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. It is open source and maintained by Ostorlab. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and...

CVE-2026-85525

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +290 more potentially affected by CVE-2026-85525 via snowflake-connector-python (>=1.7.11, <=4.7.2)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =0.0.1, =0.1.0, =2020.5.20rc1, =1.0.0b2, =2.5.1 - arreyy 0.0.1 and more Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...

Security update for python-h2

This update for python-h2 fixes the following issue: CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3972-1 Security update for python-h2

This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386...

Security update for python-h2

This update for python-h2 fixes the following issue: CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...