pythonSQLInjection_PracticaGRUPO13

Simulación y Mitigación de SQL Injection 1. Descripción de...

My-POC-CVE

My-POC-CVE ⚠️ All scripts in this project are used only f...

Exploit for CVE-2026-111497

CVE-2026-111497 Assessment Toolkit Defensive assessment tools...

CLSA-2026-1792809858 python-lxml: Fix of CVE-2026-49825

CVE-2026-49825: add missing xlink:href to HTML link attributes so the Cleaner sanitizes it...

CLSA-2026-1792809744 python-lxml: Fix of CVE-2026-49825

CVE-2026-49825: add missing xlink:href to HTML link attributes so the Cleaner sanitizes it...

CLSA-2026-1792809372 python: Fix of CVE-2026-6100

CVE-2026-6100: fix a use-after-free in the bz2 and zlib modules when a decompressor object is reused after a MemoryError; the input pointer to the released caller buffer is no longer kept, so a later decompressobj.flush as done by gzip.GzipFile at EOF cannot read it...

CLSA-2026-1792809177 python-pyasn1: Fix of CVE-2026-59886

CVE-2026-59886: fix DoS via crafted ASN.1 REAL values with large exponents...

wwwgrep

WWWGrep OWASP Foundation Web Respository Author: Mark Deen & Aditi Mohan Introduction WWWGrep is a rapid search “grepping” mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed...

RAT-via-Telegram

RAT-via-Telegram Windows Remote Administration Tool via Telegram now in Python 3.7! | Originally created by Ritiek Why another one? The current Remote Administration Tools in the market face 2 major problems: Lack of encryption. Require port forwarding in order to control from hundreds of miles...

Important: python-tornado

Issue Overview: Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory...

Important: python-tornado

Issue Overview: Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory...

Important: python3.12

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

Important: python3.11

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

Important: python3.13

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

Linux Distros Unpatched Vulnerability : CVE-2026-114603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.fromheader in...

Node.js 26.12.0 Binary Hash Lookup

A Python utility and CSV lookup that map Node.js executable SHA256 hashes to Node.js versions, helping identify installations affected by the Brotli decoder vulnerability...

Amazon Linux 2 : python-tornado (ALAS-2026-4011)

The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4011 advisory. Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remo...

Linux Distros Unpatched Vulnerability : CVE-2026-115557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate revocation configured. Known...

PT-2026-122608

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description The ssl module lacks a mechanism to automatically reject known compromised certificates when certificate revocation is not configured. To address this, a denylist of compromised certificates h...

PT-2026-122968

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration...