122399 matches found
Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5wp5-5229-5g6q. This link is maintained to preserve external references. Original Description In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to dis...
GHSA-PV39-QRFQ-G8GC Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5wp5-5229-5g6q. This link is maintained to preserve external references. Original Description In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to dis...
webpen
WebPen — Pentest Pocket Reference A static, in-depth web ap...
CVE-2026-12259
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
CVE-2026-12259
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
CVE-2026-0101
creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:45+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...
CVE-2026-7777
creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:44+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...
CVE-2026-5432
creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:45+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...
CVE-2026-3030
creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:44+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...
CVE-2026-12259 Improper Input Validation in nltk/nltk
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
CVE-2026-18589
creationtimestamp| type| source ---|---|--- 2026-08-03 06:36:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5v2fnayl2p 2026-08-03 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030402699172268 2026-08-03 07:30:32+00:00| seen|...
CVE-2026-18588
creationtimestamp| type| source ---|---|--- 2026-08-03 06:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5v2eavwb2m...
CVE-2026-13586
creationtimestamp| type| source ---|---|--- 2026-08-03 06:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/exnxhhsnzqcnb 2026-08-03 11:48:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-13586...
CVE-2026-12803
creationtimestamp| type| source ---|---|--- 2026-08-03 06:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2igor6ykz2if6 2026-08-03 11:22:47+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12803 2026-08-04 09:28:17+00:00| seen|...
CVE-2026-7878
creationtimestamp| type| source ---|---|--- 2026-08-03 05:00:03+00:00| seen| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34 2026-08-04 00:00:48+00:00| published-proof-of-concept| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34...
CVE-2026-6789
creationtimestamp| type| source ---|---|--- 2026-08-03 05:00:03+00:00| seen| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34 2026-08-04 00:00:48+00:00| published-proof-of-concept| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34...
CVE-2025-71401
creationtimestamp| type| source ---|---|--- 2026-08-03 04:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5os36ck22s 2026-08-04 11:24:49+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3msavnlqgs323...
CVE-2024-38798
creationtimestamp| type| source ---|---|--- 2026-08-03 04:09:39+00:00| seen| https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3ms5muf6wbrl2...