mikrotik0dayScanner

Mikrotik 0day Credential Disclosure Scanner Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The weakness exists due to improper authentication in the exposed by default Winbox interface on port 8291/TCP. A remote attacker can send specially...

MikroTik-Winbox-Scanner

Escáner de Protocolo Winbox MikroTik RouterOS Un escáner concurrente de alto rendimiento diseñado para detectar servicios MikroTik Winbox expuestos en Internet. Esta herramienta identifica endpoints Winbox activos en el puerto TCP 8291 y clasifica el comportamiento de respuesta de RouterOS para...

PIL-CVE-2017-8291-study

PIL-CVE-2017-8291 Baek Seunghoon@shun1403, clase 13 del 3er ciclo de White Hat School https://github.com/shun1403/PIL-CVE-2017-8291.git Entorno: Ubuntu Linux Configuración del entorno Actualice a V2 mediante sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept de la vulnerabilidad de Mikrotik CVE-2018-14847 principalmente en Winbox, que funciona leyendo la contraseña directamente desde RouterOS en el puerto predeterminado 8291. Original de: https://github.com/BigNerd95/ Requisitos Python 3+ Instalación en Lin...

Photon OS 5.0: Python3 PHSA-2026-5.0-91-0850

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0850. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-YL81211 Security fixes in python3 3.13.8-r0

Package python3 version 3.13.8-r0 fixes 1 vulnerabilities: CVE-2025-8291...

MAL-2026-8291 Malicious code in oailm6 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-8291 Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service

A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogsnnrfnfmhandlenfprofile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipulation causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to...

ROOT-OS-DEBIAN-13-CVE-2025-8291 CVE-2025-8291 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-8291 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

EulerOS Virtualization 2.12.1 : python3 (EulerOS-SA-2026-1455)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorit...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2026-1588)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : python3 (EulerOS-SA-2026-1588)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The 'zipfile' module would not check the validity of the ZIP64 End ofCentral Directory EOCD Locator record offset value would not be used to loca...

EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2026-1542)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory EOCD Locator record offset value would not...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2026-1376)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2026-1256)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

📄 MikroTik RouterOS WinBox 3.41 Username Enumeration

Proof of concept exploit for MikroTik RouterOS WinBox version 3.41 that demonstrates a username enumeration vulnerability. ============================================================================================================================================= | Title : MikroTik RouterOS WinB...

SUSE: Security Advisory (SUSE-SU-2026:20125-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 4 : ghostscript-8.70-23.AXS4.2 (AXSA:2017-1651:03)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-1651:03 advisory. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics...

SUSE SLES12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2026:0133-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0133-1 advisory. - CVE-2025-8291: check validity of the ZIP64 End of Central Directory EOCD in the 'zipfile' module bsc1251305. - CVE-2025-12084: prevent...

MiracleLinux 7 : ghostscript-9.07-20.el7.5 (AXSA:2017-1650:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1650:03 advisory. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics...