pfsense-gw-ipv6-zone

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-gw-ipv6-zone pfsense-gw-ipv6-zone Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org isipaddrv6 strips %zone for NetIPv6::checkIPv6 and never charset-checks the zone. startdpinger...

pfsense-cp-filename-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-cp-filename-xss pfsense-cp-filename-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Filename interpolates into / CSS url... on default login HTML with no encode. Portal origin i...

cve-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

pfsense-ntp-gps-fudge

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ntp-gps-fudge pfsense-ntp-gps-fudge Class: Config injection Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org system.inc concatenates GPS/PPS fudge/refid/stratum into ntpd.conf. mwexec is ntpd -...

pfsense-qinq-parent-if

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-qinq-parent-if pfsense-qinq-parent-if Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org QinQ edit stores a parent interface name with no doesinterfaceexist check. VLAN edit already...

CVE-2021-22214

CVE-2021-22214 Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01. Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was...

CVE-2021-22205

CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE Summary of the CVE GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which...

CVE-2021-22205

CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...

RustHound-CE

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...

CVE-2023-2825

CVE-2023-2825 Unauthenticated Directory traversal leads to file read. Summary of the CVE An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment...

pfsense-https-host-redirect

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-https-host-redirect pfsense-https-host-redirect Class: Open redirect Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org system.inc emits a port-80 server with return 301...

CVE-2023-7028

CVE-2023-7028 Gitlab CVE-2023-7028: Account Takeover via Password Reset without user interactions A critical vulnerability in GitLab CE/EE CVE-2023-7028 can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication...

CVE-2021-22205-gitlab

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

adPEAS

adPEAS v2 — Active Directory Privilege Escalation Awesome Scripts Comprehensive Active Directory security assessment — zero dependencies, single file, ready to go. What is adPEAS? adPEAS is a PowerShell-based security assessment tool that identifies misconfigurations, vulnerabilities, and privile...

Exploit for CVE-2026-110264

GitLab2Safe-Defensive-Checker !Pythonhttps://img.shields.i...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 This is a Python3 program that exploits GitLab authenticated RCE vulnerability known as CVE-2022-2884. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not take responsibility for the...

pfsense-uploadconfig

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-uploadconfig pfsense-uploadconfig Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org uploadconfig.php POST config= calls configinstall then systemreboot. IDENT has no...

pfsense-unbound-sock-timeout

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-unbound-sock-timeout pfsense-unbound-sock-timeout Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org sockqueuetimeout is stored raw. unbound.inc emits sock-queue-timeout:...

pfsense-unbound-acl-crlf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-unbound-acl-crlf pfsense-unbound-acl-crlf Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org ACL name/action go into accesslists.conf with no checkconf. Same include: class as...

pfsense-timezone-phpini

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-timezone-phpini pfsense-timezone-phpini Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org system.php writes $POST'timezone' with no inarray against systemgettimezonelist. istimezone...