CVE-2026-116579

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompressmessagedata in compressbrotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete...

CVE-2023-52654

Run file python3 CVE-2023-52654.py or sudo CVE-2023-52654.py latest kernel bypass root updated POC just run python file with root or without root ✅ Features Automatically escalate privileges on Unix systems by exploiting misconfigured setuid/setgid binaries, capabilities, and sudo permissions...

cve-2023-45866-py

This repository does not have a README...

CVE-2026-116579 Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompressmessagedata in compressbrotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete...

CVE-2026-116579

The Autobahn Python WebSocket and WAMP implementation for Python (versions 26.7.1 to 26.10.1 ) contains a vulnerability in the PerMessageBrotli.decompress_message_data function within compress_brotli.py . The root cause is that the Brotli decompressor is called without an output limit, and the ma...

CVE-2026-116579 Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompressmessagedata in compressbrotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete...

CVE-2026-116579

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompressmessagedata in compressbrotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete...

CVE-2026-116579 Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompressmessagedata in compressbrotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete...

CVE-2026-116575 Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, buildsessionscope in mem0/memory/main.py and Memory.buildSessionScope in the TypeScript SDK join caller-controlled userid, agentid, and runid values using unescaped ...

CVE-2026-116575

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, buildsessionscope in mem0/memory/main.py and Memory.buildSessionScope in the TypeScript SDK join caller-controlled userid, agentid, and runid values using unescaped ...

CVE-2026-116575 Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, buildsessionscope in mem0/memory/main.py and Memory.buildSessionScope in the TypeScript SDK join caller-controlled userid, agentid, and runid values using unescaped ...

CVE-2026-116575

The Mem0 persistent memory infrastructure for AI agents is vulnerable to a cross-tenant conversation leak due to an unescaped delimiter collision in the session-scope key. Specifically, the _build_session_scope() function in the Python SDK (prior to 2.0.18 ) and Memory.buildSessionScope() in the ...

CVE-2026-116575 Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, buildsessionscope in mem0/memory/main.py and Memory.buildSessionScope in the TypeScript SDK join caller-controlled userid, agentid, and runid values using unescaped ...

StealMyBitcoin-PoC

sponsored with ❤️ by Steal My Bitcoin CTF proof of concept One live PHP callback against the Steal My Bitcoin challenge, start to finish, in a single standard-library Python file. This README explains stealmybitcoinpoc.py, a single-file Python reproduction of the request sequence used in my Steal...

CVE-2026-115922 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that rawdata or int32data encodes the declared number of elements...

CVE-2026-115922 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that rawdata or int32data encodes the declared number of elements...

CVE-2026-115922

The Open Neural Network Exchange (ONNX) library is vulnerable to a Denial of Service (DoS) via memory exhaustion in versions prior to 1.22.0 . The vulnerability exists because the _unpack_2bit() and _unpack_4bit() functions resize unpacked arrays based on attacker-controlled TensorProto.dims with...

SUSE CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

DEBIAN-CVE-2026-115910

Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses getandstorenonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and getnonce and validateclaims verify only that...

CVE-2026-115910

Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses getandstorenonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and getnonce and validateclaims verify only that...