Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and earlier, a single maliciously crafted HTTP request could block the server’s event loop for an extended period, due to the use of the HTTPHeaders.add method. This method accumulates values using string...

Astra Linux – vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data was the maxbodysize setting default 100MB. Since parsing occurs synchronously on the main thread, this creates the possibility...

Astra Linux – Vulnerability in python-git

GitPython versions before 3.1.54 contain a vulnerability where an arbitrary file overwrite is possible, due to a flaw in the Diffable.diff method. This method fails to validate git options passed through thekwargs parameter. Attackers can provide the --output argument via another parameter, or us...

Astra Linux – Vulnerability in python-git

GitPython is a Python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.setvalue passed values to Python’s configparser without validating for newlines. GitPython’s own write method converts embedded newlines into indented continuation lines e.g., \n becomes...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.59 fail to disable mergeincludes when parsing .gitmodules, enabling attackers to reveal local file contents by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file containing include directives referencing sensitiv...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.53 fail to properly escape section names in git config files, enabling attackers to inject arbitrary configuration directives via malicious submodule names. Attackers can insert core.sshCommand or other dangerous config keys into the victim’s .git/config using...

Astra Linux – vulnerability in python-git

GitPython 3.1.59 fails to restrict the --no-index option in its high-level diff API, enabling attackers to read arbitrary filesystem paths as repository operands. Attackers can combine --no-index with -I/--ignore-matching-lines to create a content-dependent Boolean oracle; they repeatedly query...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.59 contain an incomplete denylist within the unsafegitrevisionoptions guard; this list omits the --contents and -S options. As a result, attackers can read arbitrary files by passing these options to Repo.blame. Attackers can also supply revision values such as...

Astra Linux – Vulnerability in Python 3.7

The readints function in plistlib.py in Python from version 3.9.1 is vulnerable to a potential Distributed Denial-of-Service DoS attack due to CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

hackingtool

AI-guided, all-in-one toolkit for authorized security testing 219 curated tools across 21 categories — recon, OSINT, web, wireless, phishing, forensics, post-exploitation and more — with an AI layer that turns plain English into the right tool and the exact command. Built for penetration testers ...

G0BurpSQLmaPI

Kousei こうせい Author: nu11secur1ty Years: 2023–2026 Language: Python with optional Go modules Purpose: Generate SQLi Proof-of-Concept requests, automate sqlmap attacks, and manage attack modules with ease. Description Kousei こうせい is an aggressive framework for sqlmap that can work with any web...

Exegol

Exegol — Cybersecurity CTF Write-ups !Statushttps://img.sh...

CVE-2026-79824

A flaw was found in Python. An attacker can exploit this directory traversal vulnerability by providing a specially crafted TAR archive containing relative path sequences, such as dot-dot notation. When the archive is extracted, files can be written outside the intended extraction directory,...

Shiny for Python has path traversal in bookmark restore

ImpactShiny for Python's bookmark-restore path accepted a client-supplied stateidquery-string value and joined it into the server-side bookmark directory/shinybookmarks/ without validating it. A value containing ..path segments, or an absolute path, could therefore cause the server to open andpar...

PYSEC-2026-4300 Shiny for Python has path traversal in bookmark restore

Impact Shiny for Python's bookmark-restore path accepted a client-supplied stateid query-string value and joined it into the server-side bookmark directory /shinybookmarks/ without validating it. A value containing .. path segments, or an absolute path, could therefore cause the server to open an...

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

API deploy code generator embeds unescaped YAML fields into Python source SummaryPraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python...

PYSEC-2026-4251 PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

API deploy code generator embeds unescaped YAML fields into Python source Summary PraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python...

PYSEC-2026-4221 Hydra logging configuration permits unsafe callable resolution

Summary Hydra passed its Python logging configuration to logging.config.dictConfig. Python's logging configurator can resolve and invoke importable classes and factories named by configuration, including handler class values and formatter, filter, handler, queue, and listener factories. This...

PYSEC-2026-4224 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Summary hydra-optuna-sweeper accepted a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolved it with the lower-level hydra.utils.getmethod API, and later invoked the returned callable. Hydra's object-lookup helpers intentionally trust their input and do not apply the...

golemrpc (>=0.3.4, <=0.3.6), neo-python (>=0.5.7, <=0.7.1) +5 more potentially affected by CVE-2026-106454 via twisted (17.9.0)

twisted PYPI version 17.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - golemrpc =0.3.4, =0.5.7, =0.1.0, =0.2.0, =0.2.1 - txwerewolves 0.6.1 - yy-spider 1.0.0 Source cves: CVE-2026-106454 Source advisory:...