62619 matches found
Fedora 42 : python3.14 (2026-ba6745d242)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ba6745d242 advisory. Security fix for CVE-2026-4519 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
AgenticSeek 代码注入漏洞
AgenticSeek is a localized AI assistant developed by Martin himself. Version 0.1.0 of AgenticSeek has a code injection vulnerability. This vulnerability stems from incorrect operations on the PyInterpreter.execute function in the sources/tools/PyInterpreter.py file, which may lead to code injecti...
AlmaLinux 8 : python3 (ALSA-2026:6473)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:6473 advisory. python: Python: Command-line option injection in webbrowser.open via crafted URLs CVE-2026-4519 Tenable has extracted the preceding description block directly from...
Fedora 42 : python3.13 (2026-49aedae50d)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-49aedae50d advisory. Security fix for CVE-2026-4519. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Malicious code in databaserobooms (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 193ce4e29885d967183910228ce00d02b4380d25ff1a9b342b1fb5b4c124e3ca During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...
MAL-2026-2488 Malicious code in photo-extractor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67f3f604528f125e85fb7be00bb17d7cf2abc5cdb20a12cbcbb38633f5877f14 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...
Malicious code in gangomodule (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8117683c90fb188f9fc013b3b3006dc5e31269d2511dd7c80eea9ac7b6892d09 During installation, obfuscated code validates the environment against typical sandboxing signs and attempts to download the next stages from remote sources. T...
CVE-2026-3644 vulnerabilities
Vulnerabilities for packages: python...
GHSA-VF33-88PF-HWP3 vulnerabilities
Vulnerabilities for packages: python...
GHSA-H46W-FFVP-4PW5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-4224 vulnerabilities
Vulnerabilities for packages: python...
web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling
Summary web3.py implements CCIP Read / OffchainLookup EIP-3668 by performing HTTP requests to URLs supplied by smart contracts in offchainlookuppayload"urls". The implementation uses these contract-supplied URLs directly after sender / data template substitution without any destination validation...
Claude SDK For Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
The async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a...
Insecure File Permissions
Claude SDK for Python is vulnerable to insecure file permissions. The vulnerability is due to the memory tool creating files with mode 0o666, where the files are world‑readable on systems with a standard umask and world‑writable in environments with a permissive umask, and a local attacker on a...
Server-side Request Forgery (SSRF)
Overview pyload-ng is a The free and open-source Download Manager written in pure Python Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the parseurls API function. An attacker can access internal network resources, read local files, enumerate file existenc...
CVE-2026-4224 vulnerabilities
Vulnerabilities for packages: python...
GHSA-H46W-FFVP-4PW5 vulnerabilities
Vulnerabilities for packages: python...
GHSA-VF33-88PF-HWP3 vulnerabilities
Vulnerabilities for packages: python...