Lucene search
+L

60229 matches found

Packet Storm
Packet Storm
added 2026/06/08 12:0 a.m.93 views

📄 ProjeQtor 12.4.3 SQL Injection

This Python script automates exploitation of an SQL injection vulnerability in a ProjeQtor login interface. Version 12.4.3 is affected. ================================================================================================================================== | Title : ProjeQtor 12.4.3...

9.8CVSS5.6AI score0.00558EPSS
SaveExploits2
CNNVD
CNNVD
added 2026/06/08 12:0 a.m.16 views

CPython 安全漏洞

CPython is a Python interpreter implemented in C language by the Python Foundation. CPython has a security vulnerability that stems from the possibility of objects being reused after decompression errors. If an application catches an OSError and retries with the same decompressor, specially craft...

8.2CVSS5.3AI score0.00428EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/08 12:0 a.m.8 views

OPENSUSE-SU-2026:10974-1 python311-pypdf-6.13.0-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

6.9CVSS5.5AI score0.00128EPSS
SaveExploits0References2
Amazon
Amazon
added 2026/06/08 12:0 a.m.15 views

Medium: python3.9

Issue Overview: http.cookies.Morsel.jsoutput returns an inline snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie valu...

6.1CVSS5.4AI score0.00229EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.21 views

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-1774)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1774 advisory. The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result ...

7.5CVSS5.5AI score0.0079EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.23 views

Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1785)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1785 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element...

6.1CVSS5.5AI score0.00229EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.18 views

TencentOS Server 4: python-pip (TSSA-2026:0422)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0422 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

8CVSS5.7AI score0.0032EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.14 views

Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2026-1821)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1821 advisory. The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.aud...

6.1CVSS5.5AI score0.00229EPSS
SaveExploits1References6
Amazon
Amazon
added 2026/06/08 12:0 a.m.19 views

Medium: python-mako

Issue Overview: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the...

8.7CVSS5.4AI score0.00361EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/06/08 12:0 a.m.18 views

ProjeQtor 12.4.3 SQL Injection Validator for Login Endpoints

This Python script is a defensive validation tool designed to identify potential SQL injection indicators in login functionality without modifying database contents or attempting exploitation...

5.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.16 views

Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2026-1786)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1786 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element...

6.1CVSS5.5AI score0.00229EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.14 views

TencentOS Server 4: python-ply (TSSA-2026:0434)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0434 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

9.8CVSS8.6AI score0.16903EPSS
SaveExploits3References2
Amazon
Amazon
added 2026/06/08 12:0 a.m.12 views

Medium: python3.12

Issue Overview: The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.audit handlers for this audit event therefore do not fire. CVE-2026-2297...

6.1CVSS5.4AI score0.00229EPSS
SaveExploits1
OSV
OSV
added 2026/06/08 12:0 a.m.10 views

OPENSUSE-SU-2026:10972-1 python311-jupyter-server-2.19.0-1.1 on GA media

These are all security issues fixed in the python311-jupyter-server-2.19.0-1.1 package on the GA media of openSUSE Tumbleweed...

8.1CVSS5.5AI score0.00437EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/06/07 5:26 a.m.5 views

python-pyjwt: PyJWT: Denial of Service via unverified JSON Web Token key IDs

A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. A remote attacker can exploit this vulnerability by sending specially crafted JWTs with unknown 'kid' key ID values. This can force the PyJWKClient.getsigningkey function to make an unlimited number of unrate-limit...

3.7CVSS6AI score0.00336EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/07 5:26 a.m.2 views

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

8.2CVSS6.1AI score0.00331EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/07 1:11 a.m.9 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-cryptography: python3-cryptography-48.0.0-3.hum1 aarch64, x8664 python-cryptography-48.0.0-3.hum1.src src...

8.9CVSS5AI score0.0068EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/07 1:5 a.m.9 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-urllib3: python3-urllib3+brotli-2.7.0-3.hum1 noarch python3-urllib3+h2-2.7.0-3.hum1 noarch python3-urllib3+socks-2.7.0-3.hum1 noarch python3-urllib3+zstd-2.7.0-3.hum1 noarch...

8.9CVSS5AI score0.0068EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/06/07 12:59 a.m.20 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-trustme: python-trustme-doc-1.2.1-2.hum1 noarch python3-trustme-1.2.1-2.hum1 noarch python-trustme-1.2.1-2.hum1.src src...

8.9CVSS5AI score0.0068EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/07 12:53 a.m.8 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-attrs: python3-attrs-26.1.0-3.hum1 noarch python-attrs-26.1.0-3.hum1.src src...

7.5CVSS6.3AI score0.00522EPSS
SaveExploits2References4
Rows per page
Query Builder