74662 matches found
RHEL 8 : python-pillow (RHSA-2026:52551)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:52551 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
Important Photon OS Security Update - PHSA-2026-5.0-90-0949
Updates of 'python-lxml' packages of Photon OS have been released...
jdwp-exploit
JDWP Remote Code Execution Exploit A Python 3 implementation...
monty v0.0.20
Monty A minimal, secure Python interpreter written in Rust for use by AI. Experimental - This project is still in development, and not ready for prime time. A minimal, secure Python interpreter written in Rust for use by AI. Monty avoids the cost, latency, complexity and general faff of using a...
Updated python-starlette package fixes security vulnerabilities
The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. CVE-2024-28849 Starlette vulnerable to On^2 DoS via Range header merging in starlette.responses.FileResponse. CVE-2025-62727 Security restriction bypass via malformed HTTP Host header. CVE-2026-48710...
Fedora 43 : python-wsgidav (2026-3808436c81)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3808436c81 advisory. fixes the following security issues: - CVE-2026-55509 - CVE-2026-55560 Tenable has extracted the preceding description block directly from the Fedor...
Unix Download Stager, python urllib
Download and exec stager via Python urllib — no curl/wget required. Host stager.py with hoststager generate. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.downloadstagers import buildstagerurl class ModulePayload: CLIENTLANGUAGE = "python" info = "name": "Unix...
Kitty Agent Installer Pack
Writes kittyagent.py plus installlinux.sh systemd and/or installwindows.ps1 scheduled task. Controller: listeners/multi/reversehttppolling. from kittysploit import from lib.c2.agentinstaller import buildinstallreadme, buildlinuxinstallsh, buildwindowsschtasksinstallps1, from lib.c2.agentspec impo...
Python PostgreSQL NOTIFY Reverse Agent
C2 agent over PostgreSQL LISTEN/NOTIFY. Pairs with listeners/database/postgresqlnotifyshell. Requires psycopg2 on target and network access to PostgreSQL. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.postgresqlnotifyagent import buildpostgresqlnotifyagentscript...
Python Reverse SSH Client
Connect back to listeners/multi/reversessh with username/password and spawn an interactive shell over the SSH channel. !/usr/bin/env python3 -- coding: utf-8 -- """Paramiko-based reverse SSH client for listeners/multi/reversessh.""" from kittysploit import class ModulePayload: CLIENTLANGUAGE =...
Python Slack Reverse Agent
Poll Slack channel for !ks cmd messages and post output. Pairs with listeners/messaging/slacksocketmode. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.slackreverseagent import buildslackreverseagentscript class ModulePayload: CLIENTLANGUAGE = "python" info = "name"...
Python Reverse UDP Shell
UDP connect-back shell KSUDPHELLO protocol. Pairs with listeners/multi/reverseudp !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import class ModulePayload: CLIENTLANGUAGE = "python" info = "name": "Python Reverse UDP Shell", "description": "UDP connect-back shell KSUDPHELLO protocol...
CLSA-2026-1786225264 Update of python
Re-tag base release to 94.0.5 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.7.5-94.0.5.el79...
python: Fix of CVE-2026-11972
CVE-2026-11972: fix an unbounded loop CPU DoS in the tarfile module when a member header in a streaming-mode archive mode="r|" declares a huge size, by breaking out of the Stream.seek read loop at EOF...
CLSA-2026-1786091187 python: Fix of CVE-2026-11972
CVE-2026-11972: fix an unbounded loop CPU DoS in the tarfile module when a member header in a streaming-mode archive mode="r|" declares a huge size, by breaking out of the Stream.seek read loop at EOF...
Malicious code in riakcs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3dada3cec22fb43bb528b8f4f7173bb346b25e373eaeb719af2df48698119240 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
maltrail v3.0
Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...
quark-engine v26.8.1
Malware Family Analysis Report Showcase | | ---|---|--- | !https://assets.kitpl...
readme2demo v0.8.0
readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...