74662 matches found
de4py v3.3.2-stable
de4py ⚠️ de4py is FREE & OPEN SOURCE CC BY-NC 4.0. Any paid versions sold elsewhere or commercial use are NOT permitted. If you paid for de4py, you were misled. De4py is an advanced Python deobfuscator with a beautiful UI PySide6 and a robust set of features for malware analysts and reverse...
web-vulnerability-scanner
Author Ranvir...
Malicious code in @years18/n8n-nodes-utils-helper-o (npm)
Source: amazon-inspector 5b7ec0fd707d50145d85051b5c960139ebe64dc5f12c89ee22ecfa8402d169c4 The package presents itself as an n8n community node but ships a stub node file nodes/PwnNode.node.js, 213 bytes, description "x" whose only real behavior is a postinstall dropper. On install, callback.js...
Malicious code in @years18/n8n-nodes-utils-helper-p (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c2eddb1197cb0c902c559648ce926f5c58d1a2552d05c8e1c49dd814fdf8804 Package advertises itself as an n8n community utility-node helper but its postinstall hook node callback.js fetches two tarballs from jasabersama.id...
Malicious code in @years18/n8n-nodes-utils-helper-r (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4bb7a1bd57477bf3cbbb1ccc9b76a2ed8b96a8117e0a4cad882b76404c86fb @years18/n8n-nodes-utils-helper-r ships a postinstall script that, on npm install, downloads a tarball from...
Malicious code in @years18/n8n-nodes-utils-helper-x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db9e566808d6a2ce38311e17939cd39ba94fc191cf5c44ab7b08b369840ba08 Package presents itself as an n8n utility helper but ships a 213-byte stub node and a hostile postinstall node callback.js. On npm install, callback....
Moderate: Red Hat Security Advisory: python-idna security update
An update for python-idna is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
python-idna: idna: Denial of Service via specially crafted long inputs
A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...
SUSE-SU-2026:23176-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service bsc1268683...
CVE-2026-73233
A flaw was found in FreeCAD. An attacker could craft a malicious formula in the FEM Displacement Constraint task dialog. Due to an incomplete escape mechanism that fails to neutralize backslashes, this crafted formula text can terminate a generated Python string. When a victim accepts the dialog,...
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6879 vulnerabilities
Vulnerabilities for packages: python...
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6879 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-73248
A flaw was found in calibre, an e-book manager. A remote attacker could craft a malicious e-book file such as EPUB, OPF, or PDF containing specially crafted metadata. When a user opens or imports this file, the application's processing of nested templates can bypass Python template restrictions,...
Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six
No d...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API "snowflake.core" versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded ".." identifier path segments, and HTTP parameter pollution CWE-141 via unencoded...