Valentin Lobstein dfe73bb4c5 Add exploit for AVideo Encoder getImage.php command injection (CVE-2026-29058) ...

Unauthenticated OS command injection via the base64Url parameter in
getImage.php. The URL is interpolated into an ffmpeg shell command
without escapeshellarg(), and FILTER_VALIDATE_URL does not block
shell metacharacters in the URL path.

2026-03-06 21:30:12 +01:00

..

auxiliary

Merge pull request #20856 from msutovsky-r7/exploit/cve-2026-21858

2026-02-16 10:06:14 -05:00

evasion/windows

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

exploit

Add exploit for AVideo Encoder getImage.php command injection (CVE-2026-29058)

2026-03-06 21:30:12 +01:00

payload

fix doc options bold to h3

2025-10-15 16:28:24 -04:00

post

add in the Grandstream modules

2026-02-17 22:33:46 +00:00

module_doc_template.md

Add checks to msftidy_docs and update the template for them

2020-07-23 20:37:39 -04:00