834 matches found
wardn
wardn AI 代理的凭据防火墙。 核心主张是结构性的，而非策略性的：代理接收的是占位令牌，而非真实的 API 密钥。真实的密钥仅跨越一个网络边界——在 wardn 代理内部，前往上游 API 的途中——并在响应返回代理之前被剥离。日志、环境、LLM 上下文窗口、临时文件以及 shell 历史中仅保留占位符。text agent process OPENAIKEY=wdnplaceholdera1b2c3d4e5f6g7h8 useless agent logs Authorization: Bearer wdnplaceholdera1b2... useless LLM contex...
MiniPlasma
MiniPlasma 在重新调查GreenPlasma中使用的技术（特别是SetPolicyVal）后，发现cldflt!HsmOsBlockPlaceholderAccess仍然存在六年前向微软报告的完全相同的问题。 我并不完全居功，谷歌Project Zero的James Forshaw发现了这个漏洞并向微软报告，据称已通过CVE-2020-17103修复。 然而，我的一位研究人员朋友指出该例程可能仍然存在漏洞，我此前也曾考虑过这一点但并未重视，因为我以为微软不可能不修补此问题或回滚补丁。 经过调查，发现谷歌Project...
XSSFuzzer
XSS Fuzzer XSS Fuzzer 是一个用纯 HTML/JavaScript/CSS 编写的简单应用程序，它基于用户定义的向量生成 XSS 载荷，这些向量使用多个占位符，这些占位符会被模糊测试列表替换。 它提供了将载荷生成为纯文本或在 iframe 内执行的可能性。在 iframe 内，可以从浏览器向任意 URL 发送 GET 或 POST 请求，并使用生成的载荷。 为什么？ XSS Fuzzer 是一个通用工具，可用于多种目的，包括： 为任何浏览器寻找新的 XSS 向量 测试 GET 和 POST 参数上的 XSS 载荷 绕过浏览器中的 XSS 审查器 绕过 Web 应用防火...
CVE-2017-18019
CVE-2017-18019 En construcción : Por favor, vuelve más tarde...
rastrea2r
.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci for master branch .. image::...
CVE-2020-17103
🛡️ MiniPlasma - CVE-2020-17103 一个 Windows 本地权限提升零日漏洞 将占位符文件转化为 SYSTEM 权限 📋 概述 MiniPlasma 是一款强大的 本地权限提升 利用工具，针对 Windows 云文件微过滤器驱动程序 cldflt.sys 中的 CVE-2020-17103 。 它允许任何标准用户在完全补丁的 Windows 11、Windows Server 2022 和 Windows Server 2025 系统上（截至 2026 年 6 月）将权限提升至 NT AUTHORITY\SYSTEM 。 🎯 受影响系统 操作系统| 是否支持|...
Important: Red Hat Security Advisory: perl-DBI:1.641 security update
An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
secveri-cve-2026-50011-negative
Este repositorio no tiene un README...
CVE-2025-5777
CVE-2025-5777 marcador de posición para CitrixBleed 2.0 CVE-2025-5777...
gf
gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...
Linux Distros Unpatched Vulnerability : CVE-2026-77281
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and...
owasp-aibom
Este repositorio no tiene un README...
CVE-2019-0708
CVE-2019-0708 先创建一个等大佬来我在更新...
EUVD-2026-82474
Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass...
CVE-2026-44024_exploit
CVE-2026-44024 — Escritura arbitraria de archivos por Path Traversal en outfile $tag de Fluentd Escritura arbitraria de archivos sin autenticación en el plugin outfile de Fluentd mediante el marcador de posición $tag. outfile permite a los operadores parametrizar la ruta de salida con un marcador...
CVE-2026-77281
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...
CVE-2026-77281
Caddy (an extensible HTTP server platform) versions 2.11.3 and earlier are affected by a placeholder re-expansion vulnerability in the rewrite handler (modules/caddyhttp/rewrite/rewrite.go). When a rewrite URI ends with a literal question mark, Rewrite.Rewrite() passes attacker-controlled replace...
CVE-2026-77281 Caddy: rewrite placeholder re-expansion
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...
CVE-2026-77281 Caddy: rewrite placeholder re-expansion
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...