852 matches found
EUVD-2023-0141
Malicious code in bioql PyPI...
EUVD-2024-2318
Malicious code in bioql PyPI...
EUVD-2022-7164
Malicious code in bioql PyPI...
EUVD-2023-0250
Malicious code in bioql PyPI...
EUVD-2022-0345
Malicious code in bioql PyPI...
EUVD-2022-0344
Malicious code in bioql PyPI...
EUVD-2022-0346
Malicious code in bioql PyPI...
ROS-20250922-08
Twisted Web HTTP 1.1 server vulnerability in the twisted.web.http module of the Twisted networking framework is related to the HTTP request processing flaws. Exploitation of the vulnerability allows an attacker acting remotely to gain access to confidential data. remotely to gain access to...
ROS-20250905-02
A vulnerability in the twisted.web component of the Twisted networking framework is related to inconsistent interpretation of HTTP requests. interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely affect the integrity of protected information as ...
Linux Distros Unpatched Vulnerability : CVE-2023-46137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web...
[SECURITY] Fedora 41 Update: matrix-synapse-1.136.0-1.fc41
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
2adif (=0.1.0), 3robotics (=0.0.1) +1572 more potentially affected by CVE-2025-50688 via twisted (>=16.0.0 <=26.4.0)
twisted PYPI version =16.0.0, =0.0.12, =3.0.9, =3.0.0, =0.1.0, =23.12.0rc1, =0.10.0, =0.0.1, =0.4.0, =3.0.0, =0.1.4, =1.0.0, =1.0.2 and more Source cves: CVE-2025-50688 Source advisory: SNYK:PYTHON-TWISTED-12671201...
Arbitrary Command Injection
Overview Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Arbitrary Command Injection via improper input sanitization in the file upload process. An attacker can execute arbitrary commands on the target...
PT-2025-31952 · Unknown · Twisted Web
Name of the Vulnerable Software and Affected Versions: TwistedWeb version 14.0.0 Description: A command injection issue exists in TwistedWeb due to improper input sanitization in the file upload functionality. An attacker can exploit this by sending a specially crafted HTTP PUT request to upload ...
Confidential Wrapped Ethereum
Transparency is one of the key benefits of public blockchains. However, the public visibility of transactions potentially compromises users' privacy. The fundamental challenge is to balance the intrinsic benefits of blockchain openness with the vital need for individual confidentiality. The...
TencentOS Server 4: python-twisted (TSSA-2024:1067)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1067 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to cross-site scripting in Twisted [CVE-2024-41810]
Summary IBM Watson Speech Services Cartridge is vulnerable to to cross-site scripting in Twisted, caused by improper validation of user-supplied input by the HTTP redirect body CVE-2024-41810. Twisted is used by our Speech Service runtimes. This vulnerabilitiy has been addressed. Please read the...
Low Latency FPGA Implementation of Twisted Edward Curve Cryptography Hardware Accelerator over Prime Field
The performance of any elliptic curve cryptography hardware accelerator significantly relies on the efficiency of the underlying point multiplication PM architecture. This article presents a hardware implementation of field-programmable gate array FPGA based modular arithmetic, group operation, a...
The vulnerability of the `twisted.web.util.redirectTo` function in the Twisted web framework allows a attacker to access confidential data and compromise its integrity.
The vulnerability of the twisted.web.util.redirectTo function in the Twisted web framework is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...
Amazon Linux 2023 : python3-twisted, python3-twisted+tls (ALAS2023-2025-903)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-903 advisory. Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly...