360 matches found
AWSBucketDump
AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...
graudit
graudit graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being...
dismember
🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...
domain
Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...
hardcodes
hardcodes extract strings from source code hardcodes is a utility for searching strings hardcoded by developers in programs. It uses a modular tokenizer that can handle comments, any number of backslashes & nearly any syntax you throw at it. Yes, it is designed to process any syntax and following...
gf
gf grep のラッパーで、よく使うパターンを入力しなくて済むようにするツールです。 何？ なぜ？ 私は grep を よく 使います。コードベースを監査するとき、meg の出力を見るとき、あるいは一般的に大量のデータを扱うときなどです。次のようなかなり複雑なパターンをよく使うことになります： ▶ grep -HnrE '$POST|GET|COOKIE|REQUEST|SERVER|FILES|php://input|stdin'...
CVE-2018-1000533
GitList 0.6.0 Remote Code Execution Vulnerability CVE-2018-1000533 GitList is a modern Git repository viewer. In GitList versions 0.6.0 and below, there is a vulnerability that passes improperly validated input to system functions, allowing arbitrary commands to be executed with PHP user...
The vulnerability of the grep command in the jline-builtins module of the Java library for handling console input allows a attacker to cause a service failure.
The vulnerability of the grep command in the jline-builtins Java library for processing console input in JLine is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux Distros Unpatched Vulnerability : CVE-2026-77422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in...
CVE-2026-77422
A flaw was found in JLine, a Java library for handling console input. The built-in grep command accepts user-controlled regular expressions and automatically wraps them, which can amplify backtracking in the regular expression engine. A remote attacker could exploit this by providing a specially...
CVE-2026-77422
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...
JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
Summary The JLine3 built-in grep command wraps the user-supplied regular expression with . before compiling it with Java's backtracking regex engine. This amplifies catastrophic backtracking and allows a short pattern such as a++b to hang the command thread on non-matching input. In environments...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java. An attacker can hang the command thread by supplying a pattern such as a++b against non-matching input, whic...
GHSA-R2XF-8XR9-62GW JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
Summary The JLine3 built-in grep command wraps the user-supplied regular expression with . before compiling it with Java's backtracking regex engine. This amplifies catastrophic backtracking and allows a short pattern such as a++b to hang the command thread on non-matching input. In environments...
EUVD-2026-85527
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...
CVE-2026-77422
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...
CVE-2026-77422 JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...
CVE-2026-77422: Inefficient Regular Expression Complexity
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...
Astra Linux – Vulnerability in libfile-find-rule-perl
File::Find::Rule in Perl version 0.34 is vulnerable to arbitrary code execution when grep encounters a crafted filename. A file handle is opened using the 2-argument form of open, allowing an attacker-controlled filename to specify the MODE parameter, thereby turning the filename into an executab...
