telnet-inetutils-auth-bypass-CVE-2026-24061

CVE-2026-24061: GNU inetutils-telnetd Authentication Bypass A Docker lab to demonstrate CVE-2026-24061 — a critical authentication bypass vulnerability in GNU inetutils telnetd that went unpatched for 11 years. The Vulnerability Telnetd passes the USER environment variable directly to...

CVE-2026-24061-lab

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purposes only. Isolated lab environment. Français ci-dessous Summary Critical authentication bypass CVSS 9.8 in GNU InetUtils telnetd ≤ 2.7. By injecting -f root as the USER variable via the Telnet NEWENVIRON option, an unauthenticated attacker...

CVE-2026-41256

A flaw was found in jq, a command line JSON processor. Top-level jq programs loaded from a file using the -f flag are truncated at the first embedded NUL byte. This issue allows an attacker who can supply a crafted filter file to prematurely truncate the program, potentially bypassing filtering...

Privilege escalation

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

CVE-2021-28271: Incorrect Default Permissions

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

PT-2021-17837

Name of the Vulnerable Software and Affected Versions: Soyal Technologies SOYAL 701Server version 9.0.1 Description: The issue is related to an elevation of privileges that can be exploited by an authenticated user to change the executable file with a binary choice. This is due to improper...

CVE-2015-1457: Exposure of Sensitive Information to an Unauthorized Actor

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command...

PT-2015-5297

Name of the Vulnerable Software and Affected Versions Fortinet FortiAuthenticator version 3.0.0 Description The issue allows local users to read arbitrary files. This is achieved via the -f flag to the dig command, which can be exploited to access unauthorized files. Recommendations For Fortinet...