[REQUEST] Mutants genetic gladitors server dump.

[AlexanderAlexis]

Hi, someone please dumo Mutants genetic gladitors, i've found some vulns.
Kobojo findings

To view the content, you need to sign in or register

: Public directory listing exposes "web.config", "bin", "App_Data" and ".ashx/.svc" handlers. Confirmed.
-

To view the content, you need to sign in or register

: "lighttpd 1.4.35"
- front-mutants.kobojo.com: ASP.NET MVC 3.0 / .NET 4.0.30319
- s-ak.kobojo.com/mutants/: "nginx 1.2.1", possibly behind Akamai
-

To view the content, you need to sign in or register

: Cockpit CMS reference, PHP likely in use.

Possible CVEs, needs verification

Lighttpd: CVE-2018-19052, CVE-2015-3200, CVE-2018-25103.

Nginx: CVE-2016-0746, CVE-2021-23017, CVE-2017-7529, CVE-2013-4547, CVE-2022-41741/41742, CVE-2013-2070.

ASP.NET MVC: CVE-2014-4075.

Cockpit CMS: CVE-2020-35131, CVE-2020-35846/35847/35848, CVE-2023-1313.

These are based on reported version banners. Actual exposure depends on patch levels, modules and configuration.

Urgent PHP check

CVE-2026-109618 and CVE-2026-109619 are reported as critical unauthenticated RCE vulnerabilities. Reported fixes are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Verify the advisories and check any Kobojo systems running PHP ASAP.