EUVD-2026-122811

On affected platforms running Arista EOS with Border Gateway Protocol BGP changing the BGP listen port from its default value disables default protective Access Control List ACL rules against unexpected BGP peering attempts...

CVE-2026-121290

Affected platforms running Arista EOS with Border Gateway Protocol (BGP) are vulnerable because changing the BGP listen port from its default value disables default protective Access Control List (ACL) rules. This configuration change allows for unexpected BGP peering attempts , potentially impac...

ldap_shell

LDAP shell This project is a fork of ldapshell from Impacket. It provides an interactive shell for Active Directory enumeration and manipulation via LDAP/LDAPS protocols, making it useful for both system administrators and security professionals. Installation These tools are only compatible with...

cloudformation-waf-acl

cloudformation-waf-acl An AWS CloudFormation template used to provision and manage AWS WAFv2 resources, including a Web ACL, managed rule groups, a custom regex pattern set, and an IP set. Components The template provisions: 1. An AWS::WAFv2::WebACL. 2. AWS managed protection rule groups:...

mud-visualizer

Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...

Adalanche

Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...

kernel: nfsd: fix dead ACL conflict guard in nfsd4_create

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A remote attacker can exploit this vulnerability by sending specially crafted NFS CREATE requests that include conflicting Access Control List ACL attributes. This leads to a memory leak, where the system fails to release...

CVE-2026-121267 Incorrect Default Permissions Vulnerability in TÜBİTAK BİLGEM's eta-remote

Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects eta-remote: from 0.0.2 before 0.0.3...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

adwsdomaindump

ADWSDomainDump Active Directory information dumper via ADWS Active Directory Web Services. Install Recommended install: pipx install git+https://github.com/mverschu/adwsdomaindump or pipx install . Usage adwsdomaindump -u 'corp.local\jsmith' -p 'password' -n 10.0.0.1 dc01.corp.local Connecting to...

s3tk

s3tk A security toolkit for Amazon S3 🍊 Battle-tested at Instacart Installation Run: pip install s3tk You can use the AWS CLI or AWS Vault to set up your AWS credentials: pip install awscli aws configure See IAM policies needed for each command. Commands Scan Scan your buckets for: ACL open to...

kcatcher

Catch what's lurking in your Kafka clusters. Introduction Kcatcher is a command-line utility for enumerating and evaluating Kafka cluster configurations. It connects to Apache Kafka clusters and retrieves detailed information about brokers, topics, ACLs, and even samples messages. Perfect for...

Apache HTTP Server - ACL Bypass

Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. id: CVE-2024-38473 info: name: Apache HTTP Server - ACL Bypass author: pdteam severity: high...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...

LAPSToolkit

LAPSToolkit Functions written in PowerShell that leverage PowerView to audit and attack Active Directory environments that have deployed Microsoft's Local Administrator Password Solution LAPS. It includes finding groups specifically delegated by sysadmins, finding users with "All Extended Rights"...

ACLight

ACLight A tool for advanced discovery of Privileged Accounts - including Shadow Admins. ACLight2 is the improved version of the tool. Shadow Admins Research The tool version 1 was published as part of the "Shadow Admins" research - more details on "Shadow Admins" are in the blog post:...

PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

CVE-2026-125371 Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125371 Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

PT-2026-141194

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl string processing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an...