
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
lib_shop_api
это библиотека Python предоставляет api для получения информации о товарах с сайта
pip install lib_shop_api
git clone https://github.com/YuranIgnatenko/lib_shop_api.git
cd lib_shop_api
pip install .
# импорт парсера
from lib_shop_api.parser import Parser
# имрорт категорий товаров для поиска
from lib_shop_api.constants import K_NOTEBOOK, K_MONITOR, K_DVD
# создание парсера
parser = Parser()
# получение количества всех страниц
count_pages = parser.get_count_pages(K_NOTEBOOK)
# получение количества всего товара из категории
count_products = parser.get_count_products(K_MONITOR)
# получение списка товаров в виде объектов класса models.Product
number_page = 1
products = parser.get_products(K_DVD, number_page)
# получить поля продукта
product = products[0]
print(str(product))
print(product.title)
print(product.image)
print(product.price)
print(product.catalog)
print(product.description)
# получиени из итератора
#с указанием максимально возможного кол-ва
#продуктов на выходе
max_wait_out_product = 5
for product in parser.get_products_iterator(K_DVD, max_wait_out_product)
print(product.title)
# Поддерживаемые категории:
K_NOTEBOOK
K_MONITOR
K_SYS_BLOCK
K_MFU
K_MONO_BLOCK
K_SMARTPHONE
K_TABLET
K_SMART_WATCH
K_WATCH
K_VR
K_FITNES
K_E_BOOK
K_ACTION_CAMERA
K_FOR_GARDEN
K_ELECTROTOOL
K_SENSORSTOOL
K_STRONG_TECH
K_MACHINE
K_AUDIO_TECH
K_DVD
K_OTH_FOR_PHOTO_VIDEO
K_HOME_KINOTEATR
K_MICROPHONE
K_FOR_TV
K_TV
K_HI_FI_TECH
K_CAMERA
K_PROECTOR
K_CAMERA_TOOLS
K_VIDEOCAMERA
K_SALES
K_OTHERS
using sources from site:
https://skypka.com/
FAQs
Library-api for web-shop
We found that lib-shop-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.