rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

socksmon

socksmon Monitor arbitrary TCP traffic using your HTTP interception proxy of choice What is socksmon? socksmon is a SOCKSv4 server based on Twisted, that tunnels incoming TCP traffic through an HTTP proxy. socksmon does this by starting an internal webserver on port 2357, posts the traffic to usi...

Twisted - Open Redirect & XSS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The Twisted web framework's redirectTo function is vulnerable to reflected XSS if an attacker can control the redirect URL. This template tests for an open redirect and XSS vulnerability in the URL parameter...

Astra Linux – Vulnerability in Twisted

Twisted is an event-driven networking engine written in Python. In affected versions, Twisted exposes cookies and authorization headers when performing cross-origin redirects. This issue is present in the twited.web.RedirectAgent and twisted.web.BrowserLikeRedirectAgent functions. Users are advis...

PYSEC-2026-4304 Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

OPENSUSE-SU-2026:12137-1 python-Twisted-doc-26.4.0-4.1 on GA media

These are all security issues fixed in the python-Twisted-doc-26.4.0-4.1 package on the GA media of openSUSE Tumbleweed...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo es un honeypot de código abierto para bases de datos NoSQL que automatiza el proceso de detectar atacantes,registrar incidentes de ataque. Los motores de simulación se despliegan usando el framework twisted.Actualmente el framework tiene...

rdpy

RDPY Protocolo de Escritorio Remoto en twisted python. RDPY es una implementación pura en Python del protocolo Microsoft RDP Remote Desktop Protocol lado cliente y servidor. RDPY está construido sobre el motor de red orientado a eventos Twisted. RDPY soporta la capa de seguridad estándar de RDP,...

CLSA-2026-1791526134 TuxCare security update for twisted (1 CVE)

TuxCare rebuilt twisted to address 1 CVE. Fixed in 20.3.0.post6+tuxcare...

SUSE CVE-2026-106454

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

carml (>=21.0.0, <=21.1.0), ctrader-fix (>=0.1.0, <=0.1.1) +17 more potentially affected by CVE-2026-106454 via twisted (21.7.0)

twisted PYPI version 21.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml =21.0.0, =0.1.0, =0.4.0, =1.0.6, =0.0.1.dev15, =0.37.0, =0.1.2, =0.0.1, =0.1.0, =6.0.0, =6.0.2 and more Source cves: CVE-2026-106454 Source...

adyanutils (>=0.4.0, <=0.8.6), binance-futures-connector (>=1.6.0, <=1.7.0) +1 more potentially affected by CVE-2026-106454 via twisted (22.1.0)

twisted PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

golemrpc (>=0.3.4, <=0.3.6), neo-python (>=0.5.7, <=0.7.1) +5 more potentially affected by CVE-2026-106454 via twisted (17.9.0)

twisted PYPI version 17.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - golemrpc =0.3.4, =0.5.7, =0.1.0, =0.2.0, =0.2.1 - txwerewolves 0.6.1 - yy-spider 1.0.0 Source cves: CVE-2026-106454 Source advisory:...

crossbar (17.3.1) potentially affected by CVE-2026-106454 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

bomiot (>=0.2.86, <=0.8.5), cashd (>=0.2.0, <=0.3.4.post1) +9 more potentially affected by CVE-2026-106454 via twisted (24.7.0)

twisted PYPI version 24.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bomiot =0.2.86, =0.2.0, =0.7.1, =0.3.1, =0.8.1, =4.0.0, =4.0.0, =0.1.0, =0.6.2, =0.1.0, =0.0.1, =0.1.5 Source cves: CVE-2026-106454 Source...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by CVE-2026-106454 via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: CVE-2026-106454 Source advisor...

waldiez (>=0.1.6, <=0.1.7), waldiez-jupyter (>=0.1.6, <=0.1.8) potentially affected by CVE-2026-106454 via twisted (24.10.0)

twisted PYPI version 24.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - waldiez =0.1.6, =0.1.6, =0.1.8 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

EUVD-2026-93873

Twisted: IMAP wildcardToRegexp ReDoS...

findontime (>=0.1.0, <=0.2.71) potentially affected by CVE-2026-106454 via twisted (16.7.0rc2)

twisted PYPI version 16.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - findontime =0.1.0, =0.2.71 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (1.5.0) +11 more potentially affected by CVE-2026-106454 via twisted (21.2.0)

twisted PYPI version 21.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-connector =1.5.0, =1.6.1, =0.1.9, =2019.2.3rc0, =0.0.0, =0.5.3, =0.8.0b1.post1, =0.8.0b1, =0.0.10, =0.0.2, =0.18.0, =0.21.1 Source cves:...