CVE-2026-59966

Prior to version 2.6.10 , Tandoor Recipes is vulnerable to a Regular Expression Denial of Service (ReDoS) . The application executes user-controlled Automation regular-expression patterns using Python's re.sub() without complexity validation or execution timeouts. An authenticated user can store ...

CVE-2026-59966 Tandoor Recipes: ReDoS (Regular Expression Denial of Service) via User-Controlled Automation Regex Patterns

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub without complexity validation or an execution timeout when an authenticated user stores a...

CVE-2026-59966 Tandoor Recipes: ReDoS (Regular Expression Denial of Service) via User-Controlled Automation Regex Patterns

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub without complexity validation or an execution timeout when an authenticated user stores a...

SUSE CVE-2026-111391

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...

Security update for python-urllib3

This update for python-urllib3 fixes the following issues: CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override bsc1283908. CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding bsc1283909. CVE-2026-97689: denial of service d...

SUSE-SU-2026:4704-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override bsc1283908. - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding bsc1283909. - CVE-2026-97689: denial of...

SUSE CVE-2026-109527

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP...

CVE-2026-111391

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...

OESA-2026-4320 python-sqlparse security update

A non-validating SQL parser. Security Fixes: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes before quotes in sqlparse.format outputformat='python' and outputformat='php' and the corresponding sqlformat -l...

CVE-2026-111391 SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...

CVE-2026-111391

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...

EUVD-2026-102845

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...

CVE-2026-111391

SGLang versions 0.5.10 through 0.5.22 are vulnerable to a code injection vulnerability in the _evaluate_filter() function. The root cause allows remote attackers to escape the eval() sandbox using re.search __globals__. By sending a crafted filter expression to the unauthenticated /dumper/configu...

ROOT-APP-PYPI-CVE-2026-24049 CVE-2026-24049 in setuptools - Patched by Root

Root has patched CVE-2026-24049 in the setuptools package for Root:PyPI. Multiple fixed versions available...

AZL-109532 CVE-2026-111450 affecting package python-wheel 0.43.0-2

Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request...

AZL-109535 CVE-2026-111444 affecting package python-wheel 0.43.0-2

Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled NOBACKSLASHESCAPES absent when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings th...

ctf-tools

ctftools A toolkit for binary exploitation in CTFs. Every too...

-SSH-Enum-CVE-2018-15473

🛡️ OpenSSH User Enumeration Tool CVE-2018-15473 User enumeration tool for OpenSSH versions below 7.7. This version has been ported to Python 3 and optimized for maximum stability in HackTheBox and TryHackMe labs. ✨ Key improvements Compatibility: Works with paramiko 3.x fixes the property object i...

From Billion-Scale to Million-Scale Language Models: Operational Capabilities for Embedded Post-Exploitation

Small Language Models SLMs are increasingly attractive for resource-constrained environments due to their low computational footprint. These characteristics also make them candidates for future autonomous malware, where connectivity, latency, privacy, or operational constraints may preclude...

PT-2026-115584

Name of the Vulnerable Software and Affected Versions SGLang versions 0.5.10 through 0.5.22 Description A code injection issue exists in the evaluate filter function. Remote attackers can execute Python code by escaping the eval sandbox using re.search globals . This is possible by sending a...