Lucene search
+L

315 matches found

GithubExploit
GithubExploit
•added 2026/10/06 6:34 a.m.•22 views

android_poc_tester

androidenv — Dockerized Android CTF POC Runner A platform fo...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/04 7:59 a.m.•14 views

CVE-2025-61765_PoC

摘要 python-socketio 5.14.0 之前的版本存在一个远程代码执行漏洞,在攻击者先前已获得服务器内部通信所用消息队列访问权限的多服务器部署中,攻击者可通过恶意 pickle 反序列化执行任意 Python 代码。 您可以在 GitHub Advisory 中找到此漏洞的详细分析。 运行 此演示涉及三个 docker 容器: 1. Redis 服务器 :充当消息代理。 2. 易受攻击的 Socket.IO 服务器 :一个基于 Flask 的服务器,使用 python-socketio 处理 WebSocket 连接,并通过 Redis 进行通信。 3. 攻击者客户端...

6.4CVSS7.3AI score0.00482EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 10:17 a.m.•14 views

CVE-2026-25254

Improper authorization leads to Remote Code Execution via SocketIO interface...

9.8CVSS0.00321EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/22 9:45 a.m.•54 views

CVE-2026-25254 Improper authorization in Qualcomm Software Center

Improper authorization leads to Remote Code Execution via SocketIO interface...

9.8CVSS0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 9:45 a.m.•19 views

CVE-2026-25254 Improper authorization in Qualcomm Software Center

Improper authorization leads to Remote Code Execution via SocketIO interface...

9.8CVSS8.2AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 9:45 a.m.•51 views

CVE-2026-25254

CVE-2026-25254 is a critical (CVSS 9.8) improper authorization vulnerability in Qualcomm Software Center (QSC family) , where deficiencies in the authentication process via the SocketIO interface allow a remote, unauthenticated attacker to achieve Remote Code Execution with high impact on confide...

9.8CVSS8.2AI score0.00321EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/22 9:45 a.m.•13 views

EUVD-2026-84344

Improper authorization leads to Remote Code Execution via SocketIO interface...

9.8CVSS8.2AI score0.00321EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•9 views

CVE-2026-25254: Improper Authorization

Improper authorization leads to Remote Code Execution via SocketIO interface...

9.8CVSS8.2AI score0.00321EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/16 11:49 a.m.•11 views

ROOT-APP-NPM-CVE-2024-38355 CVE-2024-38355 in socket.io - Patched by Root

Root has patched CVE-2024-38355 in the socket.io package for Root:npm. Multiple fixed versions available...

7.3CVSS7AI score0.00807EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/08/14 10:20 p.m.•15 views

CVE-2026-48804

A flaw was found in python-socketio, a Python implementation of the Socket.IO realtime client and server. The server stores binary messages in memory while awaiting their attachments. A remote attacker can exploit this by sending a binary message and deliberately withholding some attachments. Thi...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/08/13 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-48804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-socketio is a Python implementation of the Socket.IO realtime client and server. The python- socketio server stores binary EVENT and ACK messages in memo...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/11 8:17 p.m.•15 views

DEBIAN-CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/11 8:17 p.m.•19 views

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS0.00488EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/11 8:17 p.m.•15 views

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/11 8:17 p.m.•11 views

UBUNTU-CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/11 7:17 p.m.•37 views

CVE-2026-48804 python-socketio: Binary attachment accumulation can cause denial of service

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS0.00488EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/11 7:17 p.m.•25 views

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/08/11 7:17 p.m.•16 views

EUVD-2026-56894

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/11 7:17 p.m.•18 views

CVE-2026-48804 python-socketio: Binary attachment accumulation can cause denial of service

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS5.6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/11 7:17 p.m.•19 views

CVE-2026-48804 python-socketio: Binary attachment accumulation can cause denial of service

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References2
Rows per page
Query Builder