74152 matches found
CVE-2026-111391
SGLang versions 0.5.10 through 0.5.22 are vulnerable to a code injection vulnerability in the _evaluate_filter() function. The root cause allows remote attackers to escape the eval() sandbox using re.search __globals__. By sending a crafted filter expression to the unauthenticated /dumper/configu...
CVE-2026-111391
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...
ROOT-APP-PYPI-CVE-2026-24049 CVE-2026-24049 in setuptools - Patched by Root
Root has patched CVE-2026-24049 in the setuptools package for Root:PyPI. Multiple fixed versions available...
AZL-109532 CVE-2026-111450 affecting package python-wheel 0.43.0-2
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request...
AZL-109535 CVE-2026-111444 affecting package python-wheel 0.43.0-2
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled NOBACKSLASHESCAPES absent when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings th...
ctf-tools
ctftools A toolkit for binary exploitation in CTFs. Every too...
-SSH-Enum-CVE-2018-15473
🛡️ OpenSSH User Enumeration Tool CVE-2018-15473 User enumeration tool for OpenSSH versions below 7.7. This version has been ported to Python 3 and optimized for maximum stability in HackTheBox and TryHackMe labs. ✨ Key improvements Compatibility: Works with paramiko 3.x fixes the property object i...
From Billion-Scale to Million-Scale Language Models: Operational Capabilities for Embedded Post-Exploitation
Small Language Models SLMs are increasingly attractive for resource-constrained environments due to their low computational footprint. These characteristics also make them candidates for future autonomous malware, where connectivity, latency, privacy, or operational constraints may preclude...
PT-2026-115584
Name of the Vulnerable Software and Affected Versions SGLang versions 0.5.10 through 0.5.22 Description A code injection issue exists in the evaluate filter function. Remote attackers can execute Python code by escaping the eval sandbox using re.search globals . This is possible by sending a...
CVE-2026-111391: Improper Neutralization of Directives in Dynamically Evaluated Code
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...
UBUNTU-CVE-2026-62322
Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-controlled LINE account and induce a victim to visit the resultin...
Oracle Linux 8 : python36:3.6 (ELSA-2026-82858)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82858 advisory. - Fix CVE-2021-27291: ReDos via crafted malicious input Resolves: rhbz1943459 rhbz1943460 python-pymongo - Backport CVE-2026-88029 python-PyMySQL - Security fi...
Linux Distros Unpatched Vulnerability : CVE-2026-62322
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the...
EUVD-2025-30316
Rejected reason: Not used...
EUVD-2025-30314
Rejected reason: Not used...
EUVD-2025-30321
Rejected reason: Not used...
EUVD-2025-30315
Rejected reason: Not used...
EUVD-2024-55021
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...