CVE-2026-126780

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

EUVD-2026-123774

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780 Webmin through 2.670 Privilege Escalation via acl/save_group.cgi

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780

Webmin versions up to and including 2.670 are susceptible to a privilege escalation vulnerability within the acl/save_group.cgi component. The root cause is the improper handling of the mod parameter, which allows delegated administrators to submit arbitrary module lists. An attacker with access ...

CVE-2026-126780 Webmin through 2.670 Privilege Escalation via acl/save_group.cgi

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

PT-2026-145432

Webmin through 2.670 contains a privilege escalation vulnerability in acl/save group.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding module...

CVE-2026-126780: webmin: Webmin through 2.670 contains a privilege escalation vulnerability in acl/save_group.cgi that allows delegated…

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-9577

The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...

EUVD-2026-47887

The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...

CVE-2026-9577 Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter

The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...

CVE-2026-9577

The Post Status Notifier Lite WordPress plugin (versions before 1.13.0 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists because the plugin fails to properly escape the mod URL parameter before reflecting it onto the admin settings page at admin.php?page=post-status...

PT-2026-63576

The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...

EUVD-2005-3009

Malware in sbrugna...

EUVD-2003-1307

Malware in sbrugna...

CVE-2000-1234

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters...

SUSE CVE-2007-3779

PHP local file inclusion vulnerability in gpgpopinit.php in the G/PGP GPG Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter...

CVE-2020-28184

Cross-site scripting XSS vulnerability in TerraMaster TOS = 4.2.06 allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to /module/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in TerraMaster TOS = 4.2.06 allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to /module/index.php...

PT-2020-16939

Name of the Vulnerable Software and Affected Versions TerraMaster TOS versions 4.2.06 and earlier Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to "/module/index.php" API endpoint. This enables attackers to execute malicious...