firmware-mod-kit

Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. Extract a firmware image into its component parts User makes desired modification to the...

attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

GZDoom = 4.13.1 Arbitary Code Execution via Malicious ZScript A proof of concept for an arbitrary code execution vulnerability I found in GZDoom's https://github.com/zdoom/gzdoom ZScript functionality. An attacker can share a PK3 file containing a malicious ZScript source file and gain access to...

BiblioRCE

An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

Apache HTTP Server - ACL Bypass

Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. id: CVE-2024-38473 info: name: Apache HTTP Server - ACL Bypass author: pdteam severity: high...

Php-mod/curl Library <2.3.2 - Cross-Site Scripting

Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...

CVE-2022-35978-POC

CVE-2022-35978 POC Description CVE-2022-35978 is a critical security vulnerability affecting Minetest versions up to and including 5.5.1. Minetest is a free, open-source voxel game engine that supports easy modding and game creation. In single-player mode, a mod can set a global setting that...

ROOT-APP-GOBINARY-CVE-2026-56864 CVE-2026-56864 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56864 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-56865 CVE-2026-56865 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56865 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

CVE-2026-126780

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780 Webmin through 2.670 Privilege Escalation via acl/save_group.cgi

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

EUVD-2026-123774

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780

Webmin versions up to and including 2.670 are susceptible to a privilege escalation vulnerability within the acl/save_group.cgi component. The root cause is the improper handling of the mod parameter, which allows delegated administrators to submit arbitrary module lists. An attacker with access ...

CVE-2026-126780 Webmin through 2.670 Privilege Escalation via acl/save_group.cgi

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

PT-2026-145238

NULL pointer dereference vulnerability in Apache HTTP Server's mod md during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

PT-2026-145239

Stack-based buffer overflow vulnerability in Apache HTTP Server's mod vhost alias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

PT-2026-145432

Webmin through 2.670 contains a privilege escalation vulnerability in acl/save group.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding module...

CVE-2026-126780: webmin: Webmin through 2.670 contains a privilege escalation vulnerability in acl/save_group.cgi that allows delegated…

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...