164 matches found
CVE-2017-17562
CVE-2017-17562 RCE GoAhead web server 2.5 3.6.5 Standalone Python 3 reverse shell exploit for CVE-2017-17562, works on GoAhead web server versions 2.5 3.6.5. Blog article here. Written and tested on Python 3.7 based on POC and vulnerable environment here. Some code borrowed from the Metasploit...
CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit
CVE-2019-5096 Use After Free Dos Exploit python TriggerDOS.py ip 漏洞分析 https://github.com/embedthis/goahead.git GoAhead githublink git diff the patch 关键代码分析 在代码中定位到upload.c:370,可以看到在 wp-currentFile=0 前执行了 typedef struct WebsUpload char filename; /currentFile; ... hashEnterwp-files, wp-uploadVar,...
go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset
CVE-2026-67822 — Desbordamiento de búfer de pila en wifiSSIDset de Tenda W6-S PoC PoC complementario del artículo de Hunt-Benito "GO sin límites: CVE-2026-67822 — Desbordamiento de pila en el manejador de formularioswifiSSIDset de Tenda W6-S". CVE-2026-67822 CVSS 9.8 Crítico, CWE-121 es un...
goahead-rce-exploit
GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/handler set payload generic/shellbindtcp msf6 exploitmulti/handler set LPORT=1337 msf6 exploitmulti/handler set RHOST=192.168.1.200 msf6 exploitmulti/handler run Started bind TCP handler against 192.168.1.200:1337 Then, in another shell,...
Tenda-W20E-Vulnerability-Disclosure
Tenda W20E V5.0 Vulnerability Disclosure Security research di...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
EUVD-2026-27327
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356: Improper Neutralization of Special Elements used in an OS Command
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The MeiG Smart FORGE_SLT711 4G LTE CPE router, running firmware MDM9607.LE.1.0-00110-STD.PROD-1 , is vulnerable to unauthenticated OS command injection via the GoAhead web server . The flaw exists in a custom action handler for the /action/SetRemoteAccessCfg endpoint. Two root causes were identif...
MeiG FORGE_SLT711 操作系统命令注入漏洞
MeiG FORGESLT711 is an industrial-grade wireless communication module developed by MeiG Corporation. MeiG FORGESLT711 has a vulnerability related to operating system command injection. This vulnerability stems from issues with the /action/SetRemoteAccessCfg endpoint in the GoAhead Web server, whi...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
Exploit for CVE-2026-36356
CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Unauthentica...
From Log4j to IIS, China's Hackers Turn Legacy Bugs into Global Espionage Tools
A China-linked threat actor has been attributed to a cyber attack targeting an U.S. non-profit organization with an aim to establish long-term persistence, as part of broader activity aimed at U.S. entities that are linked to or involved in policy issues. The organization, according to a report...
EUVD-2007-6666
Malware in sbrugna...
EUVD-2017-14751
Malware in sbrugna...