rastrea2r

.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci for master branch .. image::...

CVE-Smackdown

Hello this is where we will conduct nefarious activities...

XSSFuzzer

XSS Fuzzer XSS Fuzzer is a simple application written in plain HTML/JavaScript/CSS which generates XSS payloads based on user-defined vectors using multiple placeholders which are replaced with fuzzing lists. It offers the possibility to just generate the payloads as plain-text or to execute them...

asdsadsadasdasdsadsad

This repository does not have a README...

MiniPlasma

MiniPlasma After re-investigating the technique used in GreenPlasma specifically SetPolicyVal, it turns out cldflt!HsmOsBlockPlaceholderAccess is still vulnerable to the exact same issue that was reported to Microsoft 6 years ago. I'm not taking full credit for this, James Forshaw from google...

secveri-cve-2026-50011-negative

Este repositorio no tiene un README...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...

CVE-2020-17103

🛡️ MiniPlasma - CVE-2020-17103 Un Zero-Day di Escalation dei Privilegi Locali su Windows Trasformare file placeholder in accesso SYSTEM 📋 Panoramica MiniPlasma è un potente exploit di escalation dei privilegi locali che colpisce CVE-2020-17103 nel driver Windows Cloud Files Mini Filter Driver...

CVE-2017-18019

CVE-2017-18019 In costruzione : Torna più tardi...

CVE-2026-44024_exploit

CVE-2026-44024 — Fluentd outfile $tag Path-Traversal per scrittura arbitraria di file Scrittura arbitraria di file non autenticata nel plugin outfile di Fluentd tramite il segnaposto $tag. outfile consente agli operatori di parametrizzare il percorso di output con un segnaposto $tag es. path...

CVE-2019-0708

CVE-2019-0708 Erstelle erstmal eines, warte bis die Profis kommen, ich aktualisiere später...

CVE-2025-5777

CVE-2025-5777 Segnaposto per CitrixBleed 2.0 CVE-2025-5777...

CVE-2023-28588

Questo repository non contiene un README...

wardn

wardn Um firewall de credenciais para agentes de IA. A alegação principal é estrutural, não política: os agentes recebem tokens de espaço reservado, nunca chaves de API reais. A chave real cruza apenas uma costura de rede — dentro do proxy wardn, a caminho da API upstream — e é removida das...

ECHO-5FFA-7708-A86F

Bulletin has no description...

CVE-2026-16231

hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...

EUVD-2026-65392

hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...

CVE-2026-74997

A flaw was found in Roundcube Webmail. The cmdlearn driver of the markasjunk plugin is vulnerable to remote code execution via crafted placeholder replacement values...

CVE-2026-73194

A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the preparse function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent...

EUVD-2026-64267

SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the httprequest MCP tool, allowing attackers to exfiltrate stored secrets. An MCP client can craft a request with an attacker-controlled URL containing secret placeholders to send plaintext secret values t...