phpmyadmin-config-set-2fa

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-config-set-2fa Write-up: https://abraxaslabs.tech/research/phpmyadmin-config-set-2fa phpmyadmin-config-set-2fa Class: Privilege leftover / missing step-up Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e...

sqlite-fj-using-auth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-fj-using-auth Write-up: https://abraxaslabs.tech/research/sqlite-fj-using-auth sqlite-fj-using-auth Class: Privilege leftover Reach: Local SQLite 3.53.4 b09c88c / SOURCEID 2026-07-24 19:02:57...

sqlite-xfer-auth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-xfer-auth Write-up: https://abraxaslabs.tech/research/sqlite-xfer-auth sqlite-xfer-auth Class: Privilege leftover Reach: Local SQLite 3.53.4 b09c88c, SOURCEID 2026-07-24 19:02:57...

spark-python-ds-static

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-python-ds-static Write-up: https://abraxaslabs.tech/research/spark-python-ds-static spark-python-ds-static Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation...

grafana-signup-invite-join

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · grafana-signup-invite-join Write-up: https://abraxaslabs.tech/research/grafana-signup-invite-join grafana-signup-invite-join Class: Privilege leftover Reach: Remote Grafana OSS 13.2.3 6193dc0 - Grafana Labs When...

vsftpd-deny-file-brace-child

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vsftpd-deny-file-brace-child Write-up: https://abraxaslabs.tech/research/vsftpd-deny-file-brace-child vsftpd-deny-file-brace-child Class: Privilege leftover Reach: Remote vsftpd 3.0.5 - Chris Evans The man page...

phpmyadmin-issuperuser

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-issuperuser Write-up: https://abraxaslabs.tech/research/phpmyadmin-issuperuser phpmyadmin-issuperuser Class: Privilege leftover Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e - phpMyAdmin...

pfsense-acb-restore-priv

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-acb-restore-priv pfsense-acb-restore-priv Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org newver downloads, decrypts with the stored ACB password, configrestore...

proftpd-site-copy-dest-follow

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · proftpd-site-copy-dest-follow Write-up: https://abraxaslabs.tech/research/proftpd-site-copy-dest-follow proftpd-site-copy-dest-follow Class: Privilege leftover / File write Reach: Remote ProFTPD 1.3.9d f59f248 -...

CVE-2026-59358

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-59358 Write-up: https://abraxaslabs.tech/research/cve-2026-59358 CVE-2026-59358 Class: Privilege leftover Reach: Remote Cloud Foundry UAA v79.6.0 - VMware by Broadcom / Cloud Foundry Foundation I am...

pfsense-api-unix-sock-noauth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-unix-sock-noauth pfsense-api-unix-sock-noauth Class: Privilege leftover Reach: Local pfSense Plus MIM API b4acd7ca - Netgate github.com/Netgate/pfsense-api is the public OpenAPI plus generated Python for...

pfsense-ldap-name-collision

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ldap-name-collision pfsense-ldap-name-collision Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org getUserEntry$name returns the local row on name match. isAdminUID then...

pfsense-config-readonly-restore

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-config-readonly-restore pfsense-config-readonly-restore Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org writeconfig honors user-config-readonly. configinstall and...

pfsense-wizard-uid0

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-wizard-uid0 pfsense-wizard-uid0 Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org wizard.php?xml=setupwizard.xml step 7 getUserEntryByUID0 plus localusersetpassword...

pfsense-api-fleet-jwt

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-fleet-jwt pfsense-api-fleet-jwt Class: IDOR Reach: Remote pfSense Plus MIM API Netgate pin b4acd7ca - github.com/Netgate/pfsense-api One POST /login Bearer is reused for every enrolled deviceid. Official...

mysql-set-role-leftover

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-set-role-leftover mysql-set-role-leftover Class: Privilege leftover FILE as mysqld UID; not OS LPE Reach: Remote MySQL Community Server mysqld 26.7.0 06a5c1c - Oracle SET ROLE ALL EXCEPT rfile or SET ROLE DEFAUL...

openmeetings-stale-install-admin

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-stale-install-admin openmeetings-stale-install-admin Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation InstallWizardPage redirects new requests after...

signal-server-dropwizard-admin

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · signal-server-dropwizard-admin signal-server-dropwizard-admin Class: Privilege leftover Reach: Remote Signal-Server v20261007.0.0 a15d5cd - Signal Messenger, LLC Dropwizard 5.0.2 DefaultServerFactory ships an HTTP adm...

vsftpd-ssl-data-any-ticket

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vsftpd-ssl-data-any-ticket vsftpd-ssl-data-any-ticket Class: Privilege leftover Reach: Remote vsftpd 3.0.5 Chris Evans - official tarball SHA-256 26b602ae454b0ba6d99ef44a09b6b9e0dfa7f67228106736df1f278c70bc91d3. Distr...

vsftpd-cmds-denied-alias

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vsftpd-cmds-denied-alias vsftpd-cmds-denied-alias Class: Privilege leftover Reach: Remote vsftpd 3.0.5 - Chris Evans I pinned the official tarball, not a GitHub mirror and not a distro fork. SHA-256...