[pull] master from x4nth055:master#6

pull · 2022-04-05T21:50:25Z

See Commits and Changes for more details.

Can you help keep this open source service alive? 💖 Please sponsor : )

review-notebook-app · 2022-04-14T14:48:09Z

Check out this pull request on

See visual diffs & provide feedback on Jupyter Notebooks.

Powered by ReviewNB

Just added the operation code for arp-reply. The packages that were been sent were arp requests. It worked, but didn't match the comments and variable name.

sonatype-lift · 2022-05-18T10:43:50Z

general/network-usage/network_usage_per_interface.py

+# sort values per column, feel free to change the column
+df.sort_values("Download", inplace=True, ascending=False)
+# clear the screen based on your OS
+os.system("cls") if"nt"inos.nameelseos.system("clear")


start_process_with_partial_path: Starting a process with a partial executable path
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:43:52Z

general/network-usage/network_usage_per_process.py

+# when dataframe is empty again
+pass
+# clear the screen based on your OS
+os.system("cls") if"nt"inos.nameelseos.system("clear")


start_process_with_partial_path: Starting a process with a partial executable path
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:43:54Z

general/simple-math-game/simple_math_game.py

+# Deciding and generating question
+currenType=choice(questionTypes)
+
+promptEquation=str(choice(numbersRange)) +' '+currenType+' '+str(choice(numbersRange))


blacklist: Standard pseudo-random generators are not suitable for security/cryptographic purposes.
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:43:55Z

general/simple-math-game/simple_math_game.py

+currenType=choice(questionTypes)
+
+promptEquation=str(choice(numbersRange)) +' '+currenType+' '+str(choice(numbersRange))
+solution=round(eval(promptEquation), 1)


blacklist: Use of possibly insecure function - consider using safer ast.literal_eval.
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:10Z

general/network-usage/network_usage_per_interface.py

+# sort values per column, feel free to change the column
+df.sort_values("Download", inplace=True, ascending=False)
+# clear the screen based on your OS
+os.system("cls") if"nt"inos.nameelseos.system("clear")


start_process_with_a_shell: Starting a process with a shell: Seems safe, but may be changed in the future, consider rewriting without shell
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:11Z

general/network-usage/network_usage_per_process.py

+# when dataframe is empty again
+pass
+# clear the screen based on your OS
+os.system("cls") if"nt"inos.nameelseos.system("clear")


start_process_with_a_shell: Starting a process with a shell: Seems safe, but may be changed in the future, consider rewriting without shell
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:13Z

general/simple-math-game/simple_math_game.py

+# Game Loop
+whileTrue:
+# Deciding and generating question
+currenType=choice(questionTypes)


blacklist: Standard pseudo-random generators are not suitable for security/cryptographic purposes.
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:22Z

machine-learning/dropout-in-pytorch/requirements.txt

@@ -0,0 +1,4 @@
+matplotlib==3.4.3
+numpy==1.21.5


Critical OSS Vulnerability:
pkg:pypi/[email protected]
2 Critical, 1 Severe, 0 Moderate, 0 Unknown vulnerabilities have been found across 1 dependencies
Components

pkg:pypi/[email protected]
CRITICAL Vulnerabilities (2)

CVE-2021-41495
[CVE-2021-41495] CWE-476: NULL Pointer Dereference
** DISPUTED ** Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place.
CVSS Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-476
CVE-2021-41496
[CVE-2021-41496] CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
** DISPUTED ** Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally).
CVSS Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-120
SEVERE Vulnerabilities (1)

[CVE-2021-34141] CWE-697: Incorrect Comparison
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."
CVSS Score: 5.3
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE: CWE-697
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:23Z

general/network-usage/network_usage_per_process.py

+connections_thread.start()
+# start sniffing
+print("Started sniffing")
+sniff(prn=process_packet, store=False)


Unbound name: Name sniff is used but not defined in the current scope.
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:24Z

general/network-usage/network_usage_per_process.py

+importpandasaspd
+
+# get the all network adapter's MAC addresses
+all_macs={iface.macforifaceinifaces.values()}


Unbound name: Name ifaces is used but not defined in the current scope.
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:25Z

machine-learning/dropout-in-pytorch/dropoutregularizationpytorch_pythoncodetutorial.py

+
+optimizer.zero_grad()
+# forward pass
+outputs=net_dropout(inputs)


Call error:NetDropout is not a function.
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:27Z

machine-learning/dropout-in-pytorch/dropoutregularizationpytorch_pythoncodetutorial.py

+inputs, labels=inputs.to(device), labels.to(device)
+optimizer.zero_grad()
+# forward pass
+outputs=net(inputs)


Call error:Net is not a function.
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-05-18T10:44:28Z

machine-learning/logistic-regression-in-pytorch/logistic_regression_pytorch.py

@@ -0,0 +1,158 @@
+# %%


Parsing failure: Could not parse file at machine-learning/logistic-regression-in-pytorch/logistic_regression_pytorch.py
(at-me in a reply with help or ignore)
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

sonatype-lift · 2022-08-22T14:17:45Z

general/text-adventure-game/text_adventure.py

+# Prompt Loop
+whileTrue:
+# Clearing the Console on all platforms
+os.system('cls'ifos.name=='nt'else'clear')


start_process_with_a_shell: Starting a process with a shell, possible injection detected, security issue.
Reply with "@sonatype-lift help" for info about LiftBot commands.
Reply with "@sonatype-lift ignore" to tell LiftBot to leave out the above finding from this PR.
Reply with "@sonatype-lift ignoreall" to tell LiftBot to leave out all the findings from this PR and from the status bar in Github.
When talking to LiftBot, you need to refresh the page to see its response. Click here to get to know more about LiftBot commands.
Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

…aved because of filename containing colons

Update requirements.txt

…ials

add dhcp listener tutorial
be6e68b

pullbot added the ⤵️ pull label Apr 5, 2022

add handling imbalanced datasets tutorial
16a7329

x4nth055and others added 13 commits April 16, 2022 07:37

add building crud app with flask tutorial
140c04d

update web programming topic link
46347a8

add logistic regression using pytorch tutorial
783ad7f

add named entity recognition tutorial
ac0ff47

fix issue on syn flood attack code
3105f40

fix issue on yolov3 tutorial
af7dff5

add simple message indicating the keylogger has started
ecbc855

Update arp operation code
6886ef6
Just added the operation code for arp-reply. The packages that were been sent were arp requests. It worked, but didn't match the comments and variable name.

add dropout tutorial in pytorch
1cff228

add simple math quiz game tutorial
4150ce8

add kfold cross validation tutorial
06f57a2

add making buttons in pygame tutorial
16872c4

add network usage monitor tutorial
4ce02df

sonatype-liftbot reviewed May 18, 2022
View reviewed changes

sonatype-liftbot reviewed Aug 22, 2022
View reviewed changes

x4nth055 added 28 commits August 23, 2022 13:17

add generate svg country maps tutorial
6d67a16

add currency converter gui tutorial
04c3a2c

add detecting gender by name gui app tutorial
e5493fa

add spreadsheet app tkinter tutorial
96313dc

add django weather app tutorial
1ad6e18

revert raw data to be 1Kb in size in syn flooding attack code
165ad07

add query ethereum blockchain tutorial
a73567d

fix issue on argparser in fake access point tutorial
de76901

add data cleaning tutorial
b0ae13a

add rich text editor tutorial
9d28357

rename the script
54888a1

add python code editor tutorial
94ee964

update pdf image extractor code to fit the new version of PyMuPDF
e840928

update paraphrasing code to fix an error
c1e3117

update xss scanner to fix an error
26cb9c4

add language detector tutorial
252c6c1

add youtube video download tutorial
e6e60b8

add splitting text tutorial
f7dbba5

add age calculator tutorial
c4508bc

add django authentication tutorial
a48eed1

add youtube audio downloader tutorial
91329c9

extracting frames from video - fix a bug where some frames were not s…
61b8530
…aved because of filename containing colons

add alarm clock app tutorial
79a1a88

Merge pull request#109from frenchita/master
1fdb785
Update requirements.txt

add blog & todo apps django tutorials to the README.md
bc1619d

Merge branch 'master' ofhttps://github.com/x4nth055/pythoncode-tutor…
5a6148b
…ials

add email verifier django app tutorial
83548ad

add minify css tutorial
efdbb34

pullbot merged commit efdbb34 into hemanth22:masterNov 18, 2022

		@@ -0,0 +1,4 @@
		matplotlib==3.4.3
		numpy==1.21.5

[pull] master from x4nth055:master#6

[pull] master from x4nth055:master #6

Uh oh!

Conversation

pullbot commented Apr 5, 2022• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

review-notebook-appbot commented Apr 14, 2022

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

pkg:pypi/[email protected]

[CVE-2021-41495] CWE-476: NULL Pointer Dereference

[CVE-2021-41496] CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

[CVE-2021-34141] CWE-697: Incorrect Comparison

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotMay 18, 2022

Choose a reason for hiding this comment

Uh oh!

sonatype-liftbotAug 22, 2022

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

pullbot commented Apr 5, 2022•
edited
Loading