816 matches found
shocker
Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...
PoC-CVE-2021-41773
CVE-2021-41773 PoC 호스트가 CVE-2021-41773에 취약한지 확인하기 위한 개념 증명. 설명 https://vulners.com/cve/CVE-2021-41773 Apache HTTP Server 2.4.49-2.4.50에서 경로 정규화 변경으로 인해 발견된 결함입니다. 공격자는 경로 탐색 공격을 사용하여 URL을 예상 문서 루트 외부의 파일에 매핑할 수 있습니다. 문서 루트 외부의 파일이 "require all denied"로 보호되지 않으면 이러한 요청이 성공할 수 있습니다. 또한 이 결함은 CGI...
shocknaww
shocknaww CVE-2014-6271을 확인하는 간단한 스크립트 사용 예시 ./shocknaww.py http://foo.bar/cgi-bin/foo 취약 환경 예시 상위 디렉토리에서 다음을 실행하세요. python -m CGIHTTPServer 이제 shocknaww를 로컬호스트 테스트 서버에 대해 사용하세요. ./shocknaww.py http://127.0.0.1:8000/test.py...
shellshock-cgi
shellshock-cgi 하나의 특정 서버에서 CVE-2014-6271에 취약한 CGI 스크립트를 열거하는 Python 스크립트 사용법 $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 예시 반환: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for incoming connections on the following socket 172.16.255.1:4443 !...
CVE-2024-3273-D-Link-Remote-Code-Execution-RCE
CVE-2024-3273 - D-Link 원격 코드 실행RCE 익스플로잇 설명 이 저장소는 특정 D-Link 장치에서 발견된 원격 코드 실행RCE을 허용하는 심각한 취약점인 CVE-2024-3273 에 대한 익스플로잇을 포함합니다. 이 취약점은 nassharing.cgi CGI 스크립트의 부적절한 입력 검증으로 인해 발생하며, 공격자가 인증 없이 임의의 명령을 실행할 수 있게 합니다. 영향 CVE-2024-3273의 익스플로잇은 영향을 받는 장치에 대한 무단 액세스를 허용하여 공격자가 다음을 수행할 수 있게 합니다: 시스템 구...
CVE-2025-54769
CVE-2025-54769 – LPAR2RRD RCE 설명 : 이 저장소는 lpar2rrd에서 발견된 취약점인 CVE-2025-54769에 대한 PoCProof‑of‑Concept 익스플로잇을 포함합니다. 해당 취약점은 /lpar2rrd-cgi/upgrade.sh 엔드포인트를 악용하여 원격 코드 실행RCE 및 디렉터리 트래버설을 허용합니다. 익스플로잇 작업 흐름은 다음과 같습니다: 스크립트 생성 : 악의적인 Perl CGI 페이로드users.pl를 자동으로 생성하여 임의의 셸 명령을 실행합니다기본값: whoami. 페이로드 업...
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco 버그: CSCur90888 Exploit 제목 : Cisco UCS Manager - 2.21d - 원격 명령 실행 설명 : Cisco FX-OS 1.1.2 이전 버전Firepower 9000 장치 및 Cisco Unified Computing SystemUCS Manager 2.24b 이전 버전, 2.252.25a 이전 버전, 3.02e 이전 3.0 버전의 특정 CGI 스크립트는 원격 공격자가 조작된 HTTP 요청을 통해...
CVE-2026-76871
Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...
CVE-2026-76853
Netcore NR268 firmware version 1.7.121109 is affected by a security check bypass in the parame_put_file.cgi restore archive prefix validation. The root cause is a flawed prefix check in put_parame_file_cgi.c , which allows an attacker with low privileges to bypass restricted restore archive handl...
CVE-2026-82971
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
EUVD-2026-68468
A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...
PT-2026-84054
Name of the Vulnerable Software and Affected Versions QVidium Opera11 version 3.3.2a26-Ax4x-opera11 Description An unauthenticated command injection issue exists in the CGI Script component. A remote attacker can exploit this by manipulating the ipaddr argument within the '/cgi-bin/net tr.cgi'...
CVE-2026-82971: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
CVE-2026-63586
The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...
CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface
The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...
CVE-2026-63586
CVE-2026-63586 is a critical (CVSS 3.1: 9.8) unauthenticated remote code execution vulnerability in a web-based management interface that uses a modified uhttpd server with CGI shell scripts. The root cause is a shell injection flaw: the HTTP Basic Authentication username is taken directly from t...
CVE-2026-19971
A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication. The attack is only possible within the local network. The vendor was contacted early about this...
