CVE-2024-24919

CVE-2024-24919 nuclei template of CVE-2024-24919 This template will help detect the described vulnerability by checking if the system leaks the contents of the /etc/shadow file...

cve-2021-45043

cve-2021-45043 HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter. initial post https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f exploiting via burp GET /language/lang HTTP/1.1 Host:...

Arbitrary-File-Read-CVE-2024-24919

قراءة الملفات التعسفية CVE-2024-24919 فيما يلي التنبيه الذي تم استلامه على نظام SIEM أولاً، ما هو CVE-2024-24919؟ هذا هو الوصف الموجود على موقع NIST. بعد مزيد من البحث، CVE-2024-24919 هو هجوم اجتياز المسار Path Traversal، وهو ما يفسر الطلب المُرسل إلى دليل '/etc/passwd'. يخزن دليل /etc/passwd...

CVE-2020-11651

CVE-2020-11651 سكربت يستغل ثغرات SaltStack CVE-2020-11651 و CVE-2020-11652 لإضافة مستخدمين جدد إلى خادم Salt الرئيسي المعرض للخطر عن طريق حقن إدخالات في /etc/passwd و /etc/shadow. Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author: Jasper Lievisse...

CVE-2020-25223

CVE-2020-25223 प्रभावित Sophos UTM पर CVE-2020-25223 का परीक्षण करने के लिए एक PoC स्क्रिप्ट। IP पता दिए जाने पर, स्क्रिप्ट डिवाइस की /etc/shadow फ़ाइल की एक प्रतिलिपि डाउनलोड करने का प्रयास करती है। मूल शोध: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CVE-2020-13886

PoC: https://youtu.be/nNKBRx8IglI ------------------------------------------------------------------------------------------------------------- ------------- 0day: TELEFONE IP TIP200/200 LITE & TIP 300 | स्थानीय फ़ाइल शामिल करें | ---------------------- ------------------------------- P0c लेखक:...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...

CVE-2024-24919

Check point:CVE-2024-24919 run CVE nuclei -list chick.txt -t CVE-2024-24919.yaml Replace with the target IP address, and this command will attempt to access the /etc/shadow file, which contains password hashes. curl --path-as-is -i -s -k -X POST \ -H 'Host: 117.102.198.7 ' \ -H 'Content-Length: 3...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...

CVE-2019-15107

CVE-2019-15107 برنامج اختبار CVE-2019-15107 ثغرة تنفيذ الأوامر عن بُعد في Webmin هذه، تحدث تقريبًا بسبب qx/…/ في Perl مما يؤدي إلى تنفيذ الأوامر، ويتطلب الاستغلال شروطًا خاصة معينة، وعند إعادة الإنتاج كتبت برنامج استغلال بواجهة رسومية. من الجدير بالذكر أنه إذا تم استخدام قيمة مستخدم وهمية في user...

MegaHiDocker

MegaHiDocker سيتم استغلال هذا المشروع لبعض حاويات دوكر التي تحتوي على كود ثغرة مشابه: CVE-2020-35191، ولكن هذه المرة على حاويات أخرى. = يرجى قراءة ملف Description.txt المتطلبات: 1. يجب تثبيت Docker في نظام Linux الخاص بك وتثبيت وحدة subprocess لـ Python 3.X. 2. يجب سحب الحاويات الخاصة بك ثم تشغيل...

CVE-2026-47116 LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...

CVE-2026-47116

The LTSecurity LTK3500SF device is vulnerable to a hard-coded credentials flaw where the passwords for the root and guest accounts are stored as reversible hashes within the /etc/shadow file. An attacker can use dictionary-based cracking tools to recover these credentials, subsequently allowing f...

CVE-2026-47116: Use of Hard-coded Credentials

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...

PT-2026-96969

Name of the Vulnerable Software and Affected Versions LTSecurity LTK3500SF affected versions not specified Description The device contains hard-coded credentials where the root and guest account passwords are stored in the /etc/shadow file as weak hashes. These hashes can be recovered using...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: deepin-system-monitor (UTSA-2026-110876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110876 advisory. capdacreadsearchQt QTPLUGINPATHQTSTYLEOVERRIDE Qt DAC/etc/shadowSSHroot Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: deepin-system-monitor (UTSA-2026-109825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109825 advisory. capdacreadsearchQt QTPLUGINPATHQTSTYLEOVERRIDE Qt DAC/etc/shadowSSHroot Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2025-70819

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file...

CVE-2025-70819

Zettlab D6 Ultra before 1.7.0 is vulnerable to a directory traversal flaw in its compose-file volume handling. An attacker with low-privilege local access can craft a volume entry using repeated .. segments (e.g., ../../../../../../../etc:/h_etc:rw) to mount the host's /etc/passwd and /etc/shadow...

PT-2026-90947

Name of the Vulnerable Software and Affected Versions Zettlab D6 Ultra versions prior to 1.7.0 Description An issue exists that allows the mounting of sensitive system files, such as /etc/passwd and /etc/shadow, within a container. This is achieved through directory traversal manipulations using...