CVE-2026-105801

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105791

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the runshell tool in the CommandLineExecutor component of ufo/client/mcp/localservers/climcpserver.py validates only the first token of the bashcommand parameter and permits...

openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client

A flaw was found in OpenSSH. A use-after-free vulnerability exists in the ssh client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A...

FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the URBDRC USB device redirection channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to...

essh

ESSH 一个具有持久会话和实时健康仪表盘的 SSH 工作区。 在连接中断时保持远程 shell 持续运行，使用按键或鼠标在主机之间切换，无需离开终端即可检查系统健康状态。 ESSH 使用 OpenSSH 进行连接，并使用 tmux 保持你的工作持续运行。 实际效果 观看 42 秒演示 · 下载浏览器回放 使用 df 和 lsblk 检查磁盘，使用 ps 查找繁忙进程，使用 vmstat 采样系统活动，并使用 ss 和 ip 检查套接字和接口。 演示展示了终端主题切换、侧边、半屏和全屏健康视图、会话切换、帮助， 以及连接断开后恢复同一个远程 shell。 安装 从 Releases...

mcpsnoop

Wireshark for MCP. mcpsnoop sits between your AI client and your MCP server and records every JSON-RPC frame they exchange, with no change to either side. Watch it live in your terminal, fail CI on what it finds, or send it to your tracing backend as OpenTelemetry spans. The problem The official...

sharemylogin

ShareMyLogin（开源） 这是 ShareMyLogin.com 的公开源代码。 什么是 ShareMyLogin？ ShareMyLogin 是一款用于安全共享敏感信息（如密码、API 密钥或配置机密）的工具。 问题所在 通过 Slack、电子邮件或 WhatsApp 发送密码会在聊天记录和服务器中留下该机密的永久记录。即使你删除消息，它通常也会在其他地方备份。 解决方案 ShareMyLogin 会在你的机密离开设备之前，在浏览器中 对其进行加密。它会生成一个唯一链接，供你安全地发送给任何人。 自销毁 ：可设置为在查看一次后立即删除（确保只有预期的接收者能看到）。 零知识...

CVE-2026-105801

The openapi-python-client library (prior to version 0.29.1 ) is vulnerable to arbitrary code generation because it fails to neutralize malicious content within OpenAPI documents before rendering string, docstring, and f-string contexts . An attacker providing a malicious OpenAPI document can caus...

EUVD-2026-93435

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

corelight-client

.. corelight-client: .. El número de versión se rellena automáticamente. .. |version| replace:: 1.5.22 ==================================== Cliente de línea de comandos del sensor Corelight .. contents:: Descripción general Esta herramienta proporciona un cliente de línea de comandos para el...

pphack

pphack 高级客户端原型污染扫描器 由 edoardottt 用 💙 编写 分享到 Twitter！ 安装 • 快速开始 • 示例 • 更新日志 • 贡献 • 许可证 安装 📡 使用 Go go install github.com/edoardottt/pphack/cmd/pphack@latest pphack 依赖 chromedp，因此你需要 Chrome 或基于 Chromium 的浏览器。 快速开始 🎉 Usage: pphack flags Flags: INPUT: -u, -url string Input URL -l, -list string File...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 8000 --to bore.pu...

MITM_Intercept

MITMIntercept 一种稍微不那么笨拙的方式，通过Burp等工具拦截和修改非HTTP协议，并支持SSL和TLS拦截。 本工具面向研究人员和应用程序渗透测试人员，用于执行厚客户端安全评估。 这是出色的 mitmrelay 项目的改进版本。 故事 作为 CyberArk Labs 研究部门工作的一部分，我们需要一种方法来检查 TCP 上的 SSL 和 TLS 通信，并能够实时修改数据包内容。有很多方法可以做到这一点（例如，知名的 Burp Suite 扩展 NoPE），但在某些情况下，它们都对我们不起作用。最后我们偶然发现了 mitmrelay。 mitmrelay...

CVE-2026-105788

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105789

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

sccmsqlclient

sccmsqlclient Un cliente MSSQL dedicado para la exploración y explotación de bases de datos SCCM. Consultas de reconocimiento Ejecutar scripts de PowerShell en clientes administrados Extraer secretos Instalación PIPX $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP Puedes instal...

grdpwasm

grdpwasm Un cliente RDP basado en web construido con Go WebAssembly y grdp. Conéctate a un servidor de Escritorio Remoto de Windows directamente desde tu navegador — sin necesidad de complementos. Arquitectura Browser WASM ──WebSocket──► proxy Go ──TCP──► RDP Server Debido a que los navegadores n...

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Instalación Instale el paquete metashieldcleanup usando pip:: pip install metashieldcleanup Uso Ejemplo para limpiar un archivo. .. code-block:: python import time import base64 from metashieldcleanup.api import MetashieldCleanUp api =...