Webmin_1.890-POC

ويبمين 1.890 - جذر عن بعد منتهي الصلاحية CVE-2019-15107 تم إصدار ويبمين الإصدار 1.890 مع باب خلفي يمكن لأي شخص لديه معرفة به تنفيذ أوامر كجذر. كما احتوت الإصدارات من 1.900 إلى 1.920 على باب خلفي باستخدام كود مماثل، لكن لم يكن قابلاً للاستغلال في تثبيت ويبمين الافتراضي. فقط إذا قام المسؤول بتمكين...

oxasploits

oxasploits عدد من الاستغلالات Exploits كتبها oxagast معظم هذه الثغرات CVEs منسوبة إلى oxagast أيضًا للاتصال: Marshall Whittaker [email protected] ثغرات CVE وشيفرة إثبات المفهوم PoC CVE-2006-3392 استغلال جذر عن بُعد لـ Webmin =1.29 يستولي هذا الاستغلال على ملف تعريف ارتباط Cookie خاص بـ Webmi...

CVE-2026-24061

-c0392b?style=flat GNU InetUtils telnetd - وصول جذر عن بُعد غير مصادق عبر حقن متغير NEW-ENVIRON نظرة عامة - تحليل تقني - الإصدارات المتأثرة - الاستخدام - المعالجة والتخفيف - المراجع نظرة عامة على الثغرة CVE-2026-24061 هي ثغرة حرجة في تجاوز المصادقة في خدمة telnetd الموزعة كجزء من GNU...

CVE-2026-24061---telnetd

CVE-2026-24061 – telnetd 🔥 الوصف CVE-2026-24061 هي ثغرة أمنية حرجة تؤثر على بعض تطبيقات telnetd ، مما تتيح تجاوز المصادقة والحصول على شل صلاحيات الجذر عن بُعد دون بيانات اعتماد صالحة. يوفر هذا المستودع إثبات المفهوم PoC لاكتشاف الأنظمة المعرضة للخطر. ⚠️ التأثير تجاوز المصادقة وصول غير مصرح به...

CVE-2017-7494

CVE-2017-7494 SAMBA CVE-2017-7494 भेद्यता के लिए रिमोट रूट एक्सप्लॉइट। विवरण यह एक्सप्लॉइट 2 भागों में विभाजित है: पहले, यह "implant.c" नामक पेलोड को संकलित करता है और एक लाइब्रेरी libimplantx32.so या libimplantx64.so उत्पन्न करता है जो रूट उपयोगकर्ता में बदल जाती है, पैरेंट प्रक्रिया से अलग हो...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ 이 도구는 교육 목적으로만 제작되었습니다. 통제된 환경 밖에서의 무단 사용은 엄격히 금지됩니다. CVE-2026-24061은 GNU Inetutils의 telnetd버전 1.9.3–2.7에 존재하는 치명적인 취약점CVSS 9.8으로, 원격 공격자가 USER 환경 변수를 통해 -f root를 전달하여 인증을 우회하고 루트 액세스 권한을 얻을 수 있습니다. 이 도구는 이 취약점의 악용을 시뮬레이션하기 위해 제작되었습니다. 요구 사항 Windows OS/Linux Python 3.4+ 사용 방법...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

metasploitable2-red-team-assessment

Red Team Assessment — Metasploitable 2 Type: Authorized P...

vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 रिमोट रूट शेल एक्सप्लॉइट एक सरल पायथन प्रोग्राम जो vsFTP 2.3.4 में मौजूद एक कमजोरी CVE-2011-2523 का शोषण करके लक्ष्य उपकरण पर रिमोट रूट शेल प्राप्त करता है। आवश्यकताएँ प्रयुक्त भाषा = Python3 प्रयुक्त मॉड्यूल/पैकेज: socket os pexpect paramiko getpass datetime optparse colorama...

CVE-2022-34753-EXPLOIT

CVE-2022-34753 - OS Command Injection in SpaceLogic C-Bus Home Controller CVE-2022-34753 is a critical security vulnerability classified under CWE-78, indicating an "Improper Neutralization of Special Elements used in an OS Command" commonly referred to as 'OS Command Injection'. This vulnerabili...

CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-68950: Use of Hard-coded Credentials

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — GNU Inetutils Telnetd Authentication Bypass...

CVE-2026-74232 Zbtlink MQWrt yunmgrd Cloud C2 Implant

Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...

CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret

WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...

CVE-2026-71985

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute...

CVE-2026-71985 MSI Radix AXE6600 v781521 Command Injection via accesscontrol Function

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the accesscontrol function to execute...

CVE-2026-71951

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEIvalue field, resulting in command execution wit...

CVE-2026-71952

D-Link DWR-M961 devices with hardware version C1 and firmware before 1.1.5_C1_202607071108 are vulnerable to a command injection via the /boafrm/formPinManageSetup interface. An attacker can inject commands into the oldPIN field, causing root-level execution. Remediation: upgrade to firmware 1.1....

CVE-2026-71948

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution...