⤷ Title: Python Cheatsheet for Exploit Payload Crafting: For Pentest Tools and Offensive Security
════════════════════════
𐀪 Author: Riki Satya Graha
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 04:49:31 GMT
════════════════════════
⌗ Tags: #ethical_hacking #exploit_payloads #pentest_techniques #offensive_security #python_security
════════════════════════
𐀪 Author: Riki Satya Graha
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 04:49:31 GMT
════════════════════════
⌗ Tags: #ethical_hacking #exploit_payloads #pentest_techniques #offensive_security #python_security
Medium
Python Cheatsheet for Exploit Payload Crafting: For Pentest Tools and Offensive Security
Introduction
⤷ Title: Python Web API 5 — Securing Your Python Web API: Authentication and Authorization Techniques
════════════════════════
𐀪 Author: Ayşe Kübra Kuyucu
════════════════════════
ⴵ Time: Mon, 10 Feb 2025 14:02:07 GMT
════════════════════════
⌗ Tags: #api_best_practices #python_security #python_authentication #api_security #web_api_authorization
════════════════════════
𐀪 Author: Ayşe Kübra Kuyucu
════════════════════════
ⴵ Time: Mon, 10 Feb 2025 14:02:07 GMT
════════════════════════
⌗ Tags: #api_best_practices #python_security #python_authentication #api_security #web_api_authorization
Medium
Python Web API 5 — Securing Your Python Web API: Authentication and Authorization Techniques
Web API Development with Python — Part 5/12
⤷ Title: Reinforcement Learning 20 — Securing Reinforcement Learning Systems: Best Practices in Python
════════════════════════
𐀪 Author: Ayşe Kübra Kuyucu
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:26:02 GMT
════════════════════════
⌗ Tags: #machine_learning #best_practices #python_security #cybersecurity #reinforcement_learning
════════════════════════
𐀪 Author: Ayşe Kübra Kuyucu
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:26:02 GMT
════════════════════════
⌗ Tags: #machine_learning #best_practices #python_security #cybersecurity #reinforcement_learning
Medium
Reinforcement Learning 20 — Securing Reinforcement Learning Systems: Best Practices in Python
Reinforcement Learning with Python — Part 20/20
⤷ Title: Secure Coding Part 8 — Command Injection Attack: Python eval()
════════════════════════
𐀪 Author: Siddiquimohammad
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 11:25:56 GMT
════════════════════════
⌗ Tags: #application_security #command_injection #web_penetration_testing #secure_coding #python_security
════════════════════════
𐀪 Author: Siddiquimohammad
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 11:25:56 GMT
════════════════════════
⌗ Tags: #application_security #command_injection #web_penetration_testing #secure_coding #python_security
Medium
Secure Coding Part 8 — Command Injection Attack: Python eval()
⭐What’s the issue?
⤷ Title: Secure Coding Part 9— Command Injection Attack: Python exec() & Seccomp to the rescue
════════════════════════
𐀪 Author: Siddiquimohammad
════════════════════════
ⴵ Time: Mon, 11 Aug 2025 15:53:16 GMT
════════════════════════
⌗ Tags: #command_injection #application_security #seccomp #python_security #secure_coding
════════════════════════
𐀪 Author: Siddiquimohammad
════════════════════════
ⴵ Time: Mon, 11 Aug 2025 15:53:16 GMT
════════════════════════
⌗ Tags: #command_injection #application_security #seccomp #python_security #secure_coding
Medium
Secure Coding Part 9— Command Injection Attack: Python exec() & Seccomp to the rescue
Command Injection is one of those vulnerabilities that can turn a single HTTP request into full server compromise.
⤷ Title: SQL Injection Deep Dive: Techniques, Tricks, Prevention & Python Secure Coding
════════════════════════
𐀪 Author: Vaibhav Tiwari
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 08:54:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #python_security #secure_coding #webexploit
════════════════════════
𐀪 Author: Vaibhav Tiwari
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 08:54:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #python_security #secure_coding #webexploit
Medium
SQL Injection Deep Dive: Techniques, Tricks, Prevention & Python Secure Coding
Hey there. If you’ve ever wondered how hackers sneak into databases through web apps or how to stop them, you’re in the right place. SQL…
⤷ Title: File Path Traversal — Why a one-pass ../ filter fails and how to fix it
════════════════════════
𐀪 Author: Siddiquimohammad
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 20:49:29 GMT
════════════════════════
⌗ Tags: #web_security #path_traversal #application_security #python_security #secure_coding
════════════════════════
𐀪 Author: Siddiquimohammad
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 20:49:29 GMT
════════════════════════
⌗ Tags: #web_security #path_traversal #application_security #python_security #secure_coding
Medium
File Path Traversal — Why a one-pass ../ filter fails and how to fix it
File Path Traversal — Why a one-pass ../ filter fails and how to fix it Many apps try to block path traversal by removing the literal substring ../ from user input. That one-line blacklist is …
⤷ Title: A Practical Guide to Server-Side Template Injection (SSTI)
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 09:06:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #web_security #web_development #python_security
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 09:06:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #web_security #web_development #python_security
Medium
A Practical Guide to Server-Side Template Injection (SSTI)
Template engines streamline modern web development by allowing developers to embed dynamic data directly into HTML or other output formats…
⤷ Title: The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:22:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #CVE_2025_68664 #data exfiltration #Environment Variables #Information Disclosure #LangChain #LLM Security #Prompt injection #Python Security #Serialization Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:22:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #CVE_2025_68664 #data exfiltration #Environment Variables #Information Disclosure #LangChain #LLM Security #Prompt injection #Python Security #Serialization Injection
Daily CyberSecurity
The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
A critical vulnerability was found in LangChain, the popular open-source framework used to power Large Language Model (LLM) agents. The flaw, tracked as CVE-2025-68664, carries a severe CVSS score…
⤷ Title: n8n Sandbox Escape: How CVE-2025-68668 Turns Workflows into Weapons
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 09:44:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68668 #DevSecOps #n8n #Pyodide #Python Security #rce #Sandbox Escape #Vulnerability Analysis #Workflow Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 09:44:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68668 #DevSecOps #n8n #Pyodide #Python Security #rce #Sandbox Escape #Vulnerability Analysis #Workflow Automation
Daily CyberSecurity
n8n Sandbox Escape: How CVE-2025-68668 Turns Workflows into Weapons
A critical vulnerability in the popular workflow automation platform n8n has been dissected in a new analysis by security researcher Rhoda Smart, revealing how a feature designed for flexibility b…
⤷ Title: CVE-2025-14026: Forcepoint DLP Flaw Lets Attackers Unchain Restricted Python
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 01:53:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CERT/CC #CVE_2025_14026 #DLP (Data Loss Prevention) #Enterprise Security #Forcepoint #Python Security #Sandbox Escape
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 01:53:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CERT/CC #CVE_2025_14026 #DLP (Data Loss Prevention) #Enterprise Security #Forcepoint #Python Security #Sandbox Escape
Daily CyberSecurity
CVE-2025-14026: Forcepoint DLP Flaw Lets Attackers Unchain Restricted Python
A high-severity vulnerability in the Forcepoint One DLP Client has been disclosed, revealing a method for attackers to break out of a vendor-imposed “sandbox” and execute arbitrary cod…
⤷ Title: 4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:23:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI supply chain #CVE_2025_64712 #CVSS 9.8 #LLM Data #Malicious MSG #Patch Alert #Path Traversal #Python Security #rce #Unstructured Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:23:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI supply chain #CVE_2025_64712 #CVSS 9.8 #LLM Data #Malicious MSG #Patch Alert #Path Traversal #Python Security #rce #Unstructured Library
Daily CyberSecurity
4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE
Critical Unstructured library flaw CVE-2025-64712 (CVSS 9.8) allows RCE via malicious .msg files. 4M+ downloads affected. Update to v0.18.18 now.
⤷ Title: Splunk Windows Flaws Expose Servers to System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:44:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20140 #CVE_2026_20143 #Cyber Security #DLL hijacking #infosec #Local Privilege Escalation #LPE #Patch Alert #Python Security #Splunk Enterprise #Windows Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:44:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20140 #CVE_2026_20143 #Cyber Security #DLL hijacking #infosec #Local Privilege Escalation #LPE #Patch Alert #Python Security #Splunk Enterprise #Windows Security
Daily CyberSecurity
Splunk Windows Flaws Expose Servers to System Takeover
Splunk Enterprise Windows flaws (CVSS 7.7) CVE-2026-20143 & CVE-2026-20140 allow system takeover via DLL and Python search path hijacking. Patch immediately.
⤷ Title: Critical SQL Injection Vulnerability Found in ‘ormar’ Python Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 00:00:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AppSec #CVE_2026_26198 #database security #FastAPI #infosec #ormar #Patch Alert #Python Security #sql injection #SQLalchemy #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 00:00:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AppSec #CVE_2026_26198 #database security #FastAPI #infosec #ormar #Patch Alert #Python Security #sql injection #SQLalchemy #Vulnerability
Daily CyberSecurity
Critical SQL Injection Vulnerability Found in 'ormar' Python Library
Critical SQL injection flaw (CVE-2026-26198) in ormar Python ORM allows unauthenticated attackers to leak entire databases. Update to version 0.23.0 immediately!
⤷ Title: Broken Keys: Critical Authlib Flaws Expose Millions to JWT Forgery and Padding Oracles
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 12:02:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authlib #CVE_2026_27962 #CVE_2026_28490 #CVE_2026_28498 #cybersecurity #JWT Security #OAuth #OpenID Connect #Padding Oracle #Python Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 12:02:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authlib #CVE_2026_27962 #CVE_2026_28490 #CVE_2026_28498 #cybersecurity #JWT Security #OAuth #OpenID Connect #Padding Oracle #Python Security
Daily CyberSecurity
Broken Keys: Critical Authlib Flaws Expose Millions to JWT Forgery and Padding Oracles
Three critical flaws in Authlib (including CVSS 9.1 CVE-2026-27962) allow JWT forgery and padding oracle attacks. Update to version 1.6.9 immediately.
⤷ Title: Supply Chain Alert: TeamPCP Strikes Popular AI Framework Xinference
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:13:16 +0000
════════════════════════
⌗ Tags: #Malware #AWS #Azure #Cloud Security #Credential Theft #GCP #Kubernetes #MLOps Security #PyPI #Python Security #supply chain attack #TeamPCP #Xinference
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:13:16 +0000
════════════════════════
⌗ Tags: #Malware #AWS #Azure #Cloud Security #Credential Theft #GCP #Kubernetes #MLOps Security #PyPI #Python Security #supply chain attack #TeamPCP #Xinference
Daily CyberSecurity
Supply Chain Alert: TeamPCP Strikes Popular AI Framework Xinference
Critical supply chain attack hits Xinference (v2.6.0-2.6.2). TeamPCP’s malware siphons cloud credentials and MLOps secrets. Audit your MLOps pipeline today.
⤷ Title: Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:48:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_42048 #cybersecurity #Data Loss #infosec #Langflow #Path Traversal #Python Security #shutil.rmtree #Vulnerability Research
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:48:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_42048 #cybersecurity #Data Loss #infosec #Langflow #Path Traversal #Python Security #shutil.rmtree #Vulnerability Research
Daily CyberSecurity
Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout
Langflow patches a critical 9.6 CVSS path traversal vulnerability (CVE-2026-42048). Learn how an unsafe bulk delete function put entire filesystems at risk.
⤷ Title: The Poisoned Pipeline: How a GitHub Actions Flaw Infiltrated the Popular “Elementary-Data” Library
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:30:10 +0000
════════════════════════
⌗ Tags: #Malware #2026 Tech News #cloud security #Credential Stealer #Data Engineering #dbt #Docker #Elementary_data #GitHub Actions #GITHUB_TOKEN #PyPI #Python Security #supply chain attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:30:10 +0000
════════════════════════
⌗ Tags: #Malware #2026 Tech News #cloud security #Credential Stealer #Data Engineering #dbt #Docker #Elementary_data #GitHub Actions #GITHUB_TOKEN #PyPI #Python Security #supply chain attack
Penetration Testing Tools
The Poisoned Pipeline: How a GitHub Actions Flaw Infiltrated the Popular "Elementary-Data" Library
The ubiquitous Python library elementary-data has emerged as a conduit for the exfiltration of sensitive developer telemetry. The
⤷ Title: OceanLotus Hijacks PyPI to Deploy “ZiChatBot” via Enterprise Chat APIs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:00:27 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #cybersecurity #infosec #kaspersky #malware #OceanLotus #PyPI #Python Security #Shared Libraries #supply chain attack #ZiChatBot #Zulip API
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:00:27 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #cybersecurity #infosec #kaspersky #malware #OceanLotus #PyPI #Python Security #Shared Libraries #supply chain attack #ZiChatBot #Zulip API
Daily CyberSecurity
OceanLotus Hijacks PyPI to Deploy "ZiChatBot" via Enterprise Chat APIs
OceanLotus targets Python developers worldwide via PyPI supply chain attacks. New ZiChatBot malware hijacks Zulip APIs for invisible C2 traffic. Patch now!
⤷ Title: Critical Defect Exposed: Flaw In Apache Fory Bypasses Deserialization Protections
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fory #CVE_2026_48207 #Deserialization Bypass #Pyfory #Python Security #Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fory #CVE_2026_48207 #Deserialization Bypass #Pyfory #Python Security #Remote Code Execution
Daily CyberSecurity
Critical Defect Exposed: Flaw In Apache Fory Bypasses Deserialization Protections
Discover how CVE-2026-48207, a critical PyFory deserialization policy bypass flaw, lets attackers execute remote code, and learn how to patch it now.