Tools

abraxas/jellyfin-ffmpeg-colonslash

Jellyfin Server 12.2 - High - Remote after .strm plant - FFmpeg arg injection - EncodingUtils -i leftover of GHSA-wwwm

abraxas/stirling-h2-import-leftover

Stirling-PDF v3.2.0 - Critical - Remote - H2 RUNSCRIPT leftover - CREATE OR REPLACE ALIAS import-database

abraxas/vbox-vmdk-sparse-extent

Oracle VM VirtualBox 7.2.20 - High - Local - File read - VMDK sparse FLAT extent path join

abraxas/pfsense-dhcpd-conf

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - ISC dhcpd filename

abraxas/pfsense-igmp-type

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - IGMP type newline

abraxas/pfsense-unbound-sock-timeout

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - Unbound sock-queue-timeout CRLF

abraxas/pfsense-uploadconfig

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - hidden uploadconfig

abraxas/opnsense-firmware-mirror-sed

OPNsense 26.7.6 - High - Remote - Privilege leftover - custom firmware mirror sed-skips pkg fingerprints

abraxas/opnsense-ntp-gps-fudge

OPNsense 26.7.6 - High - Remote - Config line injection - NTP GPS fudge

abraxas/opnsense-tunables-loader

OPNsense 26.7.6 - High - Remote - Config line injection - tunables loader

abraxas/spark-connect-archive-fragment

Apache Spark 4.2.0 - High - Remote - File write - Connect archives hash-fragment dest

abraxas/spark-connect-copy-local

Apache Spark 4.2.0 - High - Remote - File write - Connect session SET copyFromLocalToFs.allowDestLocal

abraxas/gitlab-gitaly-fetch-ssrf

Proof-of-concept and lab for a GitLab CE 19.4.1 Gitaly fetch SSRF: GitHub/Bitbucket importers skip resolved_address pinning, letting an authenticated…

abraxas/n8n-databricks-path-join

Proof-of-concept for an n8n path-traversal (CWE-22) in Databricks nodes: unauthenticated webhook input escapes the Genie path to leak workspace PAT…

abraxas/n8n-function-vm2

Proof-of-concept and lab for an n8n 2.42.0 sandbox escape: hidden Function/FunctionItem nodes execute JS in the main process, giving authenticated…

abraxas/uptime-kuma-setup-toctou

Proof-of-concept for a TOCTOU race in Uptime Kuma's first-run Socket.IO setup, letting an unauthenticated attacker plant a hidden second admin and…

abraxas/kafka-connect-filestream-win

Kafka Connect 4.3.1 - High - Windows FileStream classpath leftover - unauth file read/write

abraxas/cakephp-attachment-crlf

CakePHP 5.4.2 - High - Remote - CRLF - attachment Content-Type and Content-ID leftover