953 matches found
CVE-2026-24061
CVE-2026-24061-PoC ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. CVE-2026-24061 is a critical vulnerability CVSS 9.8 in telnetd from GNU Inetutils versions 1.9.3–2.7 that allows a remote attacker to bypass...
Webmin_1.890-POC
Webmin 1.890 expired Remote Root CVE-2019-15107 Webmin version 1.890 was released with a backdoor that could allow anyone with knowledge of it to execute commands as root. Versions 1.900 to 1.920 also contained a backdoor using similar code, but it was not exploitable in a default Webmin install...
CVE-2026-24061-Telnetd
CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...
vsFTP-2.3.4-Remote-Root-Shell-Exploit
vsFTP 2.3.4 Remote Root Shell Exploit A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability CVE-2011-2523 present in vsFTP 2.3.4 Requirements Language Used = Python3 Modules/Packages used: socket os pexpect paramiko getpass datetime optparse...
oxasploits
oxasploits A number of exploits written by oxagast Most of these CVEs are accreddited to oxagast as well Contact: Marshall Whittaker [email protected] CVEs and PoC code CVE-2006-3392 Webmin =1.29 remote root exploit This exploit, lifts a Webmin cookie with a directory transversal and aritrar...
CVE-2026-24061
-c0392b?style=flat GNU InetUtils telnetd - Unauthenticated Remote Root via NEW-ENVIRON Variable Injection Overview - Technical Analysis - Affected Versions - Usage - Remediation - References Vulnerability Overview CVE-2026-24061 is a critical authentication bypass vulnerability in the telnetd...
CVE-2026-24061---telnetd
CVE-2026-24061 – telnetd 🔥 Descripción CVE-2026-24061 es una vulnerabilidad crítica que afecta a ciertas implementaciones de telnetd , permitiendo un bypass de autenticación y la obtención de un shell root remoto sin credenciales válidas. Este repositorio proporciona un Proof of Concept PoC que...
CVE-2022-34753-EXPLOIT
CVE-2022-34753 - OS Command Injection in SpaceLogic C-Bus Home Controller CVE-2022-34753 is a critical security vulnerability classified under CWE-78, indicating an "Improper Neutralization of Special Elements used in an OS Command" commonly referred to as 'OS Command Injection'. This vulnerabili...
CVE-2017-7494
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...
CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
CVE-2026-68950: Use of Hard-coded Credentials
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 — GNU Inetutils Telnetd Authentication Bypass...
CVE-2026-74232 Zbtlink MQWrt yunmgrd Cloud C2 Implant
Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-71985
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute...
CVE-2026-71985 MSI Radix AXE6600 v781521 Command Injection via accesscontrol Function
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute...
CVE-2026-71951
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEIvalue field, resulting in command execution wit...
CVE-2026-71952
D-Link DWR-M961 devices with hardware version C1 and firmware before 1.1.5_C1_202607071108 are vulnerable to a command injection via the /boafrm/formPinManageSetup interface. An attacker can inject commands into the oldPIN field, causing root-level execution. Remediation: upgrade to firmware 1.1....
CVE-2026-71948
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution...