rastrea2r

.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci for master branch .. image::...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...

secveri-cve-2026-50011-negative

This repository does not have a README...

CVE-2025-5777

CVE-2025-5777 placeholder for CitrixBleed 2.0 CVE-2025-5777...

wardn

wardn A credential firewall for AI agents. The headline claim is structural, not policy: agents receive placeholder tokens, never real API keys. The real key crosses only one network seam — inside the wardn proxy, on its way to the upstream API — and is stripped from responses before they reach t...

MiniPlasma

MiniPlasma After re-investigating the technique used in GreenPlasma specifically SetPolicyVal, it turns out cldflt!HsmOsBlockPlaceholderAccess is still vulnerable to the exact same issue that was reported to Microsoft 6 years ago. I'm not taking full credit for this, James Forshaw from google...

XSSFuzzer

XSS Fuzzer XSS Fuzzer is a simple application written in plain HTML/JavaScript/CSS which generates XSS payloads based on user-defined vectors using multiple placeholders which are replaced with fuzzing lists. It offers the possibility to just generate the payloads as plain-text or to execute them...

CVE-Smackdown

Hello this is where we will conduct nefarious activities...

CVE-2020-17103

🛡️ MiniPlasma - CVE-2020-17103 A Windows Local Privilege Escalation Zero-Day Turning placeholder files into SYSTEM access 📋 Overview MiniPlasma is a powerful local privilege escalation exploit targeting CVE-2020-17103 in the Windows Cloud Files Mini Filter Driver cldflt.sys. It allows any standard...

owasp-aibom

This repository does not have a README...

CVE-2026-83991-writeup-and-poc

CVE-2026-83991: superseding a file that the caller cannot delete Microsoft awarded me a bounty of $1,000 under the Windows Insider Preview Bounty Program. I kept these lines next to each other because separating them makes the bug look more complicated than it is: CreateFileW, GENERICWRITE error ...

EUVD-2026-125212

The web dashboard in Coder 2.24.0 before 2.29.23, 2.30.0 before 2.34.14, 2.35.0 before 2.36.9, 2.37.0 before 2.37.6, and 2.38.0 before 2.38.2 replaces the $SESSIONTOKEN placeholder in external app URLs with a full-access API key without checking whether the app belongs to a sub-agent. Code runnin...

CVE-2026-78164

CVE-2026-78164 — Camel HTTP producers resolve property placeholders on message-supplied URI headers Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the HTTP producer families let an inbound message override the endpoint URI through the CamelHttpUri and CamelRestHttpU...

CVE-2023-28588

This repository does not have a README...

asdsadsadasdasdsadsad

This repository does not have a README...

CVE-2017-18019

CVE-2017-18019 Under Construction : Please come back later...

CVE-2026-44024_exploit

CVE-2026-44024 — Fluentd outfile $tag Path-Traversal Arbitrary File Write Unauthenticated arbitrary file write in Fluentd's outfile plugin via the $tag placeholder. outfile lets operators template the output path with a $tag placeholder e.g. path /var/log/fluent/$tag. Outputextractplaceholders...

CVE-2019-0708

CVE-2019-0708 Create it first, wait for the big guys to come, and I will update...

Security update for dolphin (important)

openSUSE security update: security update for dolphin ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22257-1 Rating: important References: bsc1285432 Cross-References: CVE-2026-110236 Affected Products: openSUSE Leap 16.0...

WordPress Greenshift – animation and page builder blocks plugin <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder vulnerability

Unauthenticated Sensitive Information Exposure in Nested COOKIE: Placeholder vulnerability discovered by jiahao in WordPress Plugin Greenshift versions = 13.2.2...