hardcodes

hardcodes extract strings from source code hardcodes is a utility for searching strings hardcoded by developers in programs. It uses a modular tokenizer that can handle comments, any number of backslashes & nearly any syntax you throw at it. Yes, it is designed to process any syntax and following...

graudit

graudit graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

AWSBucketDump

AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

CVE-2026-9151

CVE-2026-9151 Authenticated OS command injection in the Archer AX17 v1 VPN client import. An admin on the LAN imports an OpenVPN client profile. The profile description is stored as the filename /etc/openvpn/.ovpn. Reading that profile writes the path into /tmp/ovpncurredit. The next VPN write,...

CVE-2018-1000533

GitList 0.6.0 Remote Code Execution Vulnerability CVE-2018-1000533 GitList is a modern Git repository viewer. In GitList versions 0.6.0 and below, there is a vulnerability that passes improperly validated input to system functions, allowing arbitrary commands to be executed with PHP user...

CVE-2026-63496

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

CVE-2026-63496 augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern`

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

CVE-2026-63496

The augment-vir helper functions library, specifically the @augment-vir/node package, is vulnerable to arbitrary OS command execution prior to version 31.73.5 . The root cause is located in the grep() function (grep.ts:310), which inserts caller-controlled search patterns into a double-quoted she...

EUVD-2026-120443

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

CVE-2026-63496 augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern`

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

PT-2026-141126

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

CVE-2026-63496: electrovir augment-vir: augment-vir is a collection of helper functions

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization grep.ts:310. When the constructed command is passed to spawn...

CVE-2026-121749 nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.5.0 through 0.40.8, the requested version pattern is passed to grep as a bare argument, without -e, in nvmlsremoteindextab, nvmremoteversion, and nvmlscached. A .nvmrc whose first li...

CVE-2026-121749

Node Version Manager (nvm ) versions 0.5.0 through 0.40.8 are vulnerable to argument injection in the nvm_ls_remote_index_tab, nvm_remote_version, and nvm_ls_cached functions. The software passes version patterns to grep without the -e flag, allowing a malicious .nvmrc file to inject options. For...

CVE-2026-121749 nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.5.0 through 0.40.8, the requested version pattern is passed to grep as a bare argument, without -e, in nvmlsremoteindextab, nvmremoteversion, and nvmlscached. A .nvmrc whose first li...

PT-2026-137191

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.5.0 through 0.40.8 Description In the nvm ls remote index tab, nvm remote version, and nvm ls cached functions, the requested version pattern is passed to grep as a bare argument without the -e flag. A .nvmr...

Exploit for CVE-2026-9151

CVE-2026-9151 Authenticated OS command injection in the Arche...

GRAudit Grep Auditing Tool 4.1

Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility, grep. It's comparable to other static analysis applications like RATS, SWAAT, and flaw-finder while keeping the technical requirements to a minimum and being very...