libxml2: double-free/UAF in libxml2 Python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

CVE-2024-4701-POC

CVE-2024-4701 https://nvd.nist.gov/vuln/detail/CVE-2024-4701 docker-compose up python3 ex.py...

libxml2: double-free/UAF in libxml2 Python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

GHSA-XMJ3-9GF7-H52W vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, kubeflow-katib, ansible-operator-fips, pypy-3.11, kserve-pmmlserver-fips, ansible-operator, semgrep, authentik-fips, datadog-agent, py3-pipenv, kserve-pmmlserver, request-1276, wazuh-manager, tensorflow-gpu-jupyter, nemo-skills, graalvm,...

BlackMamba

BlackMamba Command and Control What's BlackMamba? Black Mamba is a Command and Control C2 that works with multiple connections at same time. It was developed with Python and with Qt Framework and have multiples features for a post-exploitation step. Some Features Multiple clients. Real-time...

Wazuh - Unsafe Deserialization Remote Code Execution

A critical Remote Code Execution RCE vulnerability exists in Wazuh server versions = 4.4.0 and = 4.4.0 and 4.9.1. The vulnerability occurs due to unsafe deserialization in the wazuh-manager package, specifically in the DistributedAPI where parameters are serialized as JSON and deserialized using...

Netsweeper <=6.4.3 - Python Code Injection

Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php with certain Referer headers launches a command line with client-supplied parameters, and allows injection of shell metacharacters. id: CVE-2020-13167 info: name: Netsweeper =6.4.4 to mitiga...

Exploit for CVE-2026-111497

AGPL-3.0 / commercial Brotli decoder exposure, with evidence...

C-A-S

C.A.S-Exploit CVE-2017-5689 research and validation toolkit Crypto Anarchy Squad C.A.S @anarchysquad An archived Python/Bash proof of concept for investigating the Intel AMT authentication-bypass issue tracked as CVE-2017-5689. Use only against devices and networks you own or are explicitly...

ReelPhish

Instructions for ReelPhish: This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html Installation Steps 1. The latest release of Python 2.7.x...

UBUNTU-CVE-2026-114617

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parseidtoken reads the noncesupported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and hybrid...

UBUNTU-CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

PT-2026-123148

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load param in txt of the file python/src/nnabla/utils/cli/encode decode param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to laun...

PT-2026-123149

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func set nnabla version decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in...

ROS-20261026-73-0211

The vulnerability in python-multipart is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261026-73-0213

The vulnerability of the UPLOADDIR configuration and the UPLOADKEEPFILENAME=True setting in the Python-multipart streaming parser is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a remote attacker to write arbitrary files...

PT-2026-123433

Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 6.2.0 Description In the OpenIdConnectAuth component within social core/backends/open id connect.py, the get and store nonce function stores the OpenID Connect nonce in a shared OpenIdConnectAssociation...

PT-2026-125385

Name of the Vulnerable Software and Affected Versions Autobahn Python versions 26.7.1 through 26.10.0 Description An unauthenticated WebSocket client can trigger a memory-exhaustion denial of service on servers that enable the opt-in permessage-brotli feature. This occurs because the decompress...

PT-2026-123435

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.32.0 Description An authenticated caller can provide forged shared-memory address and monotonic id values within the public multimodal features.kwargs data. In scale-out deployments where shared-memory multimodal cachi...

PT-2026-125469

Summary A flaw in dd-trace-py’s IAST instrumentation can cause the Python application process to terminate unexpectedly when processing certain attacker-controlled input. Only applications with IAST enabled are affected. IAST is disabled by default. Details The affected IAST string-processing...