1051 matches found
CVE-2026-41940
CVE-2026-41940 – Contournement d'authentification cPanel/WHM + Changeur de mot de passe root Ce script exploite la vulnérabilité de contournement d'authentification sur cPanel/WHM CVE-2026-41940 en utilisant une technique d'injection CRLF pour falsifier une session administrateur. Une fois réussi...
CVE-2023-28432
CVE-2023-28432 fuite d'informations MinIO fuite des identifiants de compte Le système MinIO présente une vulnérabilité de fuite d'informations. Un attaquant distant non authentifié peut obtenir toutes les informations sensibles en envoyant une requête POST spéciale à /minio/bootstrap/v1/verify, y...
CVE-2026-41940
CVE-2026-41940 — Outil de recherche de contournement d'authentification WHM/cPanel Ce dépôt contient un script Preuve de concept PoC basé sur une chaîne de contournement d'authentification cPanel/WHM via le cookie whostmgrsession et les en-têtes HTTP. Après une intrusion réussie, le script modifi...
CVE-2024-25832-PoC
CVE-2024-25830 و CVE-2024-25832 - التحكم غير الصحيح في الوصول ورفع الملفات غير المقيد في DataCube3. نظرة عامة يحتوي هذا المستودع على إثبات المفهوم PoC لسلسلة استغلال من خطوتين تستهدف أجهزة DataCube3. تجمع بين CVE-2024-25830 التحكم غير الصحيح في الوصول لاستخراج كلمات مرور الجذر و CVE-2024-25832 رف...
CVE-2017-13872-Patch
CVE-2017-13872-Patch قم بتنزيل هذا البرنامج وتشغيله، ثم سيطلب منك كلمة مرور جديدة لمستخدم الجذر. قد تكون كلمة المرور مختلفة، لكن أعتقد أن الخيار الافتراضي يساوي كلمة مرور المسؤول. التحديث يمكنك تصحيح الخطأ عن طريق ترقية نظام التشغيل لديك...
CVE-2022-0847
CVE-2022-0847 استغلال ثغرة CVE-2022-0847 والتي تزيل كلمة مرور حساب الجذر مباشرة الاستخدام: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit المتطلبات: gcc ملخص العمل: إن POC الاستغلال الكلاسيكي التقليدي لماكس كيلرمان كان يستخدم لإضافة مستخدم بصلاحيات الجذر، ولكن في هذا POC الاستغلال، يقوم بإزالة كل...
CVE-2026-22094 Weak root password in EVbee DC 80
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...
CVE-2026-22094
The firmware for the EVbee DC-80 contains a weak hardcoded root password . This vulnerability allows an attacker to gain root access by authenticating through the SSH daemon , which is exposed to the network. No specific remediation or exploit details are provided in the documents.
CVE-2026-22094 Weak root password in EVbee DC 80
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...
CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
UBUNTU-CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
CVE-2026-92761
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...
EUVD-2026-81029
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...
CVE-2026-66408
The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account...
CVE-2026-66408
CVE-2026-66408 affects the DEEBOT PRO M1 and DEEBOT PRO K1VAC: the root accounts are configured with weak passwords. A user with physical access can obtain the root password, enabling privileged action on the device. The CVSS metrics indicate a physical attack with low complexity, but high confid...
CVE-2026-49005
The root password hash of the device can be obtained through unencrypted information in the firmware...
CVE-2026-49005
The root password hash of the device can be obtained through unencrypted information in the firmware...