CVE-2026-102906

The 0xshariq github-mcp-server is vulnerable to an OS command injection in the Git Remove MCP Tool component. The flaw exists within the child_process.exec function of the src/github.ts file, where manipulation of the File argument allows for remote code execution. The exploit is publicly availab...

EUVD-2026-89579

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

vbsmin

VBSmin VBScript minifier Features ⬜️ Remove extra whitespace Trailing whitespace Leading whitespace Blank lines Inline extra spaces 💬 Remove comments Single quote start of the line Single quote inline REM 1️⃣ One-line Line splitting underscore Colon Quick start Quick install $ gem install vbsmin...

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors 📖 Overview Nowadays, password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: https://www.example.com/product/123 https://www.example.com/product/456...

remove-ai-watermarks

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Google Gemini sparkle watermark and vendor text marks; invisible pixel watermarks through direct local-format disruption or diffusion regeneration; C2PA, EXIF, XMP, IPTC,...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

cve-2019-1040-scanner

CVE-2019-1040 扫描器 通过 SMB 检查 CVE-2019-1040 漏洞。 该脚本将与目标主机建立连接，并发送无效的 NTLM 认证。如果该认证被接受，则说明目标存在 CVE-2019-1040 漏洞，你可以使用 ntlmrelayx 执行 MIC Remove 攻击。 请注意，此操作不会产生失败的登录尝试，因为登录信息本身是有效的，只是缺少 NTLM 消息完整性代码，因此认证被拒绝，且不会增加 badpwdcount 计数。 用法 该脚本需要较新版本的 impacket。应同时支持 Python 2 和 Python 3（Python 3 需要使用来自 git 的...

Exif-Remove

命令行工具 - 轻松移除Exif数据 该工具使用Python 2.7编写，并通过pyinstaller编译为Windows操作系统版本。这个工具没有什么特别之处，只是让我的工作更轻松，也许对你也有用。 为什么？ Exif是存储在你的照片中的隐藏Metadata。许多好意的人无意中expose personal information，这些信息嵌入在这些数字图片的元数据中。为了更好地保护你的在线confidentiality，移除Exif数据至关重要。 更新日志 v.1.0.3 工具会检查Exif数据是否已被移除（通过文件名中的ex字符串识别） 修复问题 - 单线程工作器 安装说明...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

CVE-2026-37065

CVE-2026-37065 Veno File Manager 项目 4.4.9 版本存在任意文件删除漏洞。 要利用此漏洞，具有 superadmin 角色的已认证攻击者可以向受影响端点发送特制的 POST 请求，使用 url 参数 remove 来控制要删除的文件。无需用户交互。例如，如果删除了根目录下的 index.php 文件，应用程序将停止运行。 https://github.com/user-attachments/assets/5fcf2bd6-cdb3-4758-8d2d-aa491eaadab3...

WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting

WordPress MW Font Changer plugin 4.2.5 and before contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

SUSE CVE-2026-97434

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

DEBIAN-CVE-2026-97434

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

CVE-2026-97434

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

AZL-103610 CVE-2026-97434 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

CVE-2026-97434

The Linux kernel contains a vulnerability in the dpaa2-switch driver. The issue stems from how NAPI instances are handled during the .remove() path for a DPSW device. Because NAPI instances are shared across all ports but only disabled once the last port goes down, unregistering and freeing ports...

EUVD-2026-86047

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

CVE-2026-97434 dpaa2-switch: fix handling of NAPI on the remove path

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...