CVE-2026-24061

CVE-2026-24061 - GNU InetUtils telnetd 引数インジェクションによる認証回避 GNU InetUtils バージョン 1.9.3 から 2.7 は、telnetd サーバーにおけるリモート認証回避の脆弱性の影響を受けます。telnetd デーモンは、USER 環境変数を login1 プログラムにコマンドライン引数として渡す前に適切にサニタイズしません。telnet クライアントが -f root などのコマンドラインフラグを含む USER 環境変数を送信すると、telnetd はこのサニタイズされていない値をそのまま login...

Exploit for Write-what-where Condition in Linux Linux_Kernel

DirtyFrag-Galaxy 한국어 · English DirtyFragCVE-20...

PT-2026-99894

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0.2 through 4.0.13 Canonical LXD versions 5.0.0 through 5.0.9 Canonical LXD versions 5.1.0 through 5.21.7 Canonical LXD versions 6.0.0 through 6.9 Description Improper link resolution in the recursive file pull feature...

Exploit for Write-what-where Condition in Linux Linux_Kernel

DFRoot — SM-S938B Galaxy S25 Ultra Adapted Version · Quick M...

samba-trans2open-exploit-report

Samba Trans2Open Exploit Report This repository contains a full technical walkthrough of exploiting the Samba Trans2Open vulnerability CVE-2003-0201 on a virtual Linux environment. The exploitation was done for educational and ethical hacking training purposes. Report Contents Network and service...

Smiirl-Auto-root

Gaining Root Access on the Smiirl Counter Introduction Hi...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through a race condition in the SshKeys::generateFiles process. An attacker can gain unauthorized root access by atomically replacing...

CVE-2026-100682 Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink validation. Attackers with BUILDER role can craft a malicious ZIP with leaf symlink entries followed by duplicate file entri...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock CVE-2026-43499 — ASUS Zenfone 9 exploit + KernelSU...

metasploitable2-vsftpd-exploit

Metasploitable2 – vsftpd 2.3.4 Backdoor Exploitation Overv...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Kestra

Unauthenticated RCE in Kestra via a Trailing-Path Auth Bypass...

OESA-2026-4086 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. Th...

OESA-2026-4087 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. Th...

OESA-2026-4085 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. Th...

OESA-2026-4084 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. Th...

CVE-2026-79959

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

CVE-2026-79959 Botslab G980H Dashcams Use of Hard-coded Credentials

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

CVE-2026-79959 Botslab G980H Dashcams Use of Hard-coded Credentials

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

EUVD-2026-86464

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

CVE-2026-79959

The Botslab G980H dash camera firmware is vulnerable to use of hard-coded credentials because it contains a root account password that cannot be modified by the user. An attacker with physical access to the device or the ability to obtain the firmware can recover these credentials to gain root ac...