Lucene search
+L
PypaMost viewed

7249 matches found

PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Code injection in FreeIPA

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function berscanf was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger...

8.8CVSS7AI score0.07353EPSS
SaveExploits0References13Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Cross Site Request Forgery in mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.8CVSS6.9AI score0.00733EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

8.8CVSS7.5AI score0.10618EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Out-of-bounds Write in OpenCV.

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

5.5CVSS6.8AI score0.01507EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Information disclosure vulnerability in OnionShare

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...

5.3CVSS6.7AI score0.01794EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Divide By Zero in OpenCV.

An issue was discovered in OpenCV 4.1.0 OpenCV-Python 4.1.0.25. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...

5.9CVSS6.7AI score0.02351EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Out-of-bounds Read and Out-of-bounds Write in OpenCV

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

7.5CVSS6.7AI score0.0276EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Improper Restriction of XML External Entity Reference in Plone

Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role...

8.8CVSS7.2AI score0.01423EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.13 views

Moderate severity vulnerability that affects Products.PlonePAS

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors...

6CVSS6.1AI score0.0097EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/01 10:16 p.m.13 views

PYSEC-2026-612

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly listed items for which the user has not been granted choose permission. A user with access to the Wagtail admin could se...

4.3CVSS5.8AI score0.00162EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/07/01 7:16 p.m.13 views

PYSEC-2026-2179

Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide...

8.7CVSS6.2AI score0.0069EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/06/30 8:6 p.m.13 views

Malicious code in executor-engine (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of executor-engine were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials an...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/29 3:42 p.m.13 views

Malicious code in spateo-release (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of spateo-release were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/29 3:36 p.m.13 views

Malicious code in dynamo-release (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of dynamo-release were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

SummaryThe environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like securityContext and inject multi-document YAML to create additional unintended Kubernetes resources. DetailsThe server interpolates...

10CVSS6.4AI score0.00498EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise

Lemur 1.9.0: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acmeurl SSRF and creator-equality IDOR Vulnerability Summary Field | Value-- | --Title | Lemur 1.9.0: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via...

9.9CVSS6.1AI score
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

SummaryAll components based on BaseFileComponent are vulnerable to the following vulnerability:1. Docling DoclingInlineComponent2. Docling Serve DoclingRemoteComponent3. Read File FileComponent4. NVIDIA Retriever Extraction NvidiaIngestComponent5. Video File VideoFileComponent6. Unstructured API...

9.6CVSS6.4AI score0.00469EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Injection vulnerability that affects ironic-discoverd

OpenStack Ironic Inspector aka ironic-inspector or ironic-discoverd, when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error...

9.2CVSS6.3AI score0.01598EPSS
SaveExploits0References13Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Langroid has WAF Bypass Leading to RCE in TableChatAgent

Affected Scopelangroid = 0.59.31 Vulnerability Description CVE-2025-46724 fix bypass:TableChatAgent can call pandaseval tool to evaluate the expression. There is a WAF in langroid/utils/pandasutils.py introduced to block code injection CVE-2025-46724. However it can be bypassed due to literalok...

9.8CVSS7AI score0.00742EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

vLLM has RCE In Video Processing

SummaryA chain of vulnerabilities in vLLM allow Remote Code Execution RCE:1. Info Leak - PIL error messages expose memory addresses, bypassing ASLR2. Heap Overflow - JPEG2000 decoder in OpenCV/FFmpeg has a heap overflow that lets us hijack code executionResult: Send a malicious video URL to vLLM...

9.8CVSS7.5AI score0.03723EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Langflow has Remote Code Execution in CSV Agent

SummaryThe CSV Agent node in Langflow hardcodes allowdangerouscode=True, which automatically exposes LangChain’s Python REPL tool pythonreplast. As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution RCE. 2...

9.8CVSS7.7AI score0.33694EPSS
SaveExploits4References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

A Path Traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitrary files on the filesystem when processing malicious MSG files with attachments. Impact An attacker can craft a malicious .msg file with attachment filenames containing path traversal...

9.8CVSS7.9AI score0.00616EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

ImpactA critical path traversal and extension bypass vulnerability in Flask-Reuploaded allows remote attackers to achieve arbitrary file write and remote code execution through Server-Side Template Injection SSTI. Patches Flask-Reuploaded has been patched in version 1.5.0 Workarounds1. Do not pas...

9.8CVSS6.7AI score0.01046EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

SummaryAlice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response t...

9.9CVSS6AI score0.00361EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

SummaryA SQL injection vulnerability in the Oracle path of FilterEngine.createsqlaquery allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint GET /dids//dids/search. Attacker-controlled filter keys and values are interpolated...

9.9CVSS6.5AI score0.00281EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

Horovod thru 0.28.1 contains an insecure deserialization vulnerability CWE-502 in its KVStore HTTP server component. The KVStore server, used for distributed task coordination, lacks authentication and authorization controls, allowing any remote attacker to write arbitrary data via HTTP PUT...

9.8CVSS6.4AI score0.00687EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub

The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization CWE-502 when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.frompretrained method uses torch.load to load the pytorchmodel.bin weight file without enabling the security-restrictive...

9.8CVSS6.2AI score0.00409EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

SummaryA SQL injection vulnerability in FilterEngine.createpostgresquery allows any authenticated Rucio user to execute arbitrary SQL against the configured PostgreSQL metadata database through the DID search endpoint GET /dids//dids/search. When the external metadata plugin postgresmeta is...

9.9CVSS7AI score0.00301EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

SummaryThe substituteutcpargs method in clicommunicationprotocol.py inserts user-controlled toolargs values directly into shell command strings without any sanitization or escaping. These commands are then executed via /bin/bash -c Unix or powershell.exe -Command Windows, allowing an attacker to...

10CVSS6.2AI score0.00272EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

SummaryType: Vertical privilege escalation. The PATCH /workspaces/workspaceid/members/userid endpoint is gated by requireworkspacememberworkspaceid, which defaults to minrole="member" and is never overridden by the route. The handler then calls MemberService.updateroleworkspaceid, userid, body.ro...

9.6CVSS6AI score0.00209EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

SummaryPraisonAI's call server exposes a network-facing agent control API without authentication when CALLSERVERTOKEN is not configured.The affected component is the praisonai.api.agentinvoke router as mounted by praisonai.api.call. The authentication helper verifytoken fails open when...

9.8CVSS5.9AI score0.00346EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Ludwig framework is vulnerable to insecure deserialization in its model serving component

The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization CWE-502 in its model serving component. When starting a model server with the ludwig serve command, the framework loads model weight files using torch.load without enabling the security-restrictive weightsonly=True...

9.8CVSS6.6AI score0.00497EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

dash-uploader has a directory traversal vulnerability

ImpactAn unauthenticated path traversal vulnerability exists in dash-uploader versions 0.1.0 through 0.7.0a2. The library's HTTP request handler at dashuploader/httprequesthandler.py reads three form parameters uploadid, resumableFilename, resumableIdentifier from request.form.get and passes them...

9.8CVSS7.5AI score0.05982EPSS
SaveExploits4References9Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

PraisonAI Vulnerable Untrusted Remote Template Code Execution

PraisonAI treats remotely fetched template files as trusted executable code without integrity verification, origin validation, or user confirmation, enabling supply chain attacks through malicious templates.--- DescriptionWhen a user installs a template from a remote source e.g., GitHub, PraisonA...

9.6CVSS6.4AI score0.00304EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

Summaryexecutecode in praisonai-agents runs attacker-controlled Python inside a three-layer sandbox that can be fully bypassed by passing a str subclass with an overridden startswith method to the safegetattr wrapper, achieving arbitrary OS command execution on the host. Detailspythontools.py:20...

10CVSS6.2AI score0.013EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

aws-mcp has a Command Injection Remote Code Execution Vulnerability

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability.The specific flaw exists within the handling...

9.8CVSS7.8AI score0.01908EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Sentry: Improper authentication on SAML SSO process allows user identity linking

ImpactA critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program.The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sent...

9.1CVSS6AI score0.00435EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

PraisonAI Has Missing Authentication in WebSocket Gateway

SummaryThe PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. Detailsgateway/server.py:242 source -...

9.1CVSS6AI score0.00444EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

SummaryMarimo 19.6k stars has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands.Unlike other WebSocket endpoints e.g., /ws that correctly...

9.8CVSS7.6AI score0.96576EPSS
SaveExploits16References10Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer

Remote Code Execution via Unsafe Deserialization in Pipecat's LivekitFrameSerializer SummaryA critical vulnerability exists in Pipecat's LivekitFrameSerializer – an optional, non-default, undocumented frame serializer class now deprecated intended for LiveKit integration. The class's deserialize...

9.8CVSS7.2AI score0.00701EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Agno is vulnerable to Eval Injection

Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the fieldtype parameter passed to eval. Attackers can influence the fieldtype value in a FunctionCall to achieve...

9.8CVSS6.9AI score0.00842EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

SummaryThe getalluserthreads function constructs raw SQL queries using f-strings with unescaped thread IDs fetched from the database. An attacker stores a malicious thread ID via updatethread. When the application loads the thread list, the injected payload executes and grants full database acces...

9.8CVSS6AI score0.00534EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

SummaryThe --mcp CLI argument is passed directly to shlex.split and forwarded through the call chain to anyio.openprocess with no validation, allowlist check, or sanitization at any hop, allowing arbitrary OS command execution as the process user. Detailscli/features/mcp.py:61 source -...

9.8CVSS6.2AI score0.00824EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

Summarypraisonai browser start exposes the browser bridge on 0.0.0.0 by default, and its /ws endpoint accepts websocket clients that omit the Origin header entirely. An unauthenticated network client can connect as a fake controller, send startsession, cause the server to forward startautomation ...

9.1CVSS6.2AI score0.00356EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...

9.8CVSS7.5AI score0.01534EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

LiteLLM has SQL Injection in Proxy API key verification

ImpactA database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route for example POST /chat/completions an...

9.8CVSS6.1AI score0.8942EPSS
SaveExploits8References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

SciTokens is vulnerable to SQL Injection in KeyCache

SummaryThe KeyCache class in scitokens was vulnerable to SQL Injection because it used Python's str.format to construct SQL queries with user-supplied data such as issuer and keyid. This allowed an attacker to execute arbitrary SQL commands against the local SQLite database.Ran the POC below...

9.8CVSS6.4AI score0.00492EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Excessive Attack Surface in pyload-ng

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

9.8CVSS6.3AI score0.0072EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

9.8CVSS7.2AI score0.11082EPSS
SaveExploits2References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.13 views

Langchain SQL Injection vulnerability

In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain...

9.8CVSS6.4AI score
SaveExploits0References6Affected Software1
Total number of security vulnerabilities5000