1051 matches found
CVE-2023-28432
CVE-2023-28432（MinIO情報漏えい）アカウント・パスワード漏えい MinIOシステムには情報漏えいの脆弱性が存在し、認証されていないリモート攻撃者が特別なPOSTリクエストを/minio/bootstrap/v1/verifyに送信することで、MINIOSECRETKEYやMINIOROOTPASSWORDを含むすべての機密情報を取得でき、管理者アカウントのパスワード漏えいにつながる可能性があります。 使用方法 xk-mt-CVE-2023-28432.py -u http://127.0.0.1:9001/login...
CVE-2026-41940
CVE-2026-41940 — WHM/cPanel 認証バイパス調査ツール このリポジトリには、cPanel/WHM （whostmgrsession クッキーとHTTPヘッダーを介した）認証バイパスチェーンに基づく概念実証（PoC）スクリプトが含まれています。このスクリプトは、侵入成功後にrootパスワードを変更し、結果をファイルに書き込みます。 法的免責事項 このソフトウェアは、明示的な許可があるシステム （自身のラボ環境、契約済みペネトレーションテスト、ベンダー承認済みのセキュリティテスト）でのみ使用してください。無許可のアクセスは、ほとんどの国で犯罪...
CVE-2024-25832-PoC
CVE-2024-25830 및 CVE-2024-25832 - DataCube3 부적절한 접근 제어 및 제한 없는 파일 업로드. 개요 이 저장소는 DataCube3 장치를 대상으로 하는 2단계 익스플로잇 체인의 개념 증명PoC을 제공합니다. CVE-2024-25830부적절한 접근 제어을 이용하여 루트 비밀번호를 추출하고, CVE-2024-25832제한 없는 파일 업로드를 이용하여 리버스 셸 스크립트를 배포합니다. 이 PoC는 블로그 게시물 "DataCube3 Vulnerability Report"의 상세 취약점 분석을 보완합니다...
CVE-2017-13872-Patch
CVE-2017-13872-Patch 이 소프트웨어를 다운로드하여 실행하면 루트 사용자에 대한 새 비밀번호를 요청합니다. 비밀번호는 다를 수 있지만, 기본 옵션에서는 관리자 비밀번호와 동일하다고 생각합니다. 업데이트 OS를 업그레이드하여 버그를 수정할 수 있습니다...
CVE-2022-0847
CVE-2022-0847 CVE-2022-0847의 익스플로잇으로, 루트 계정의 비밀번호를 직접 제거합니다. 사용법: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit 요구 사항: gcc 작동 요약: Max Kellermann의 전통적인 클래식 익스플로잇 POC는 루트 권한을 가진 사용자를 추가하는 데 사용되었지만, 이 POC 익스플로잇은 /etc/passwd 파일 root❌0:0:root:/root:/bin/bash을 수정하여 루트 계정의 비밀번호를 제거합니다. 코드 관련 세부 사항: 이에 ...
CVE-2026-41940
CVE-2026-41940 – cPanel/WHM 认证绕过 + Root 密码修改器 此脚本利用 cPanel/WHM 上的认证绕过漏洞（CVE-2026-41940），通过 CRLF 注入技术伪造管理员会话。成功利用后，脚本可在 WHM 中修改 root 用户的密码，并通过 Telegram 发送通知。 警告：仅用于对您拥有或已获得书面授权的系统进行安全测试。滥用此脚本进行非法访问违反法律。 📦 安装依赖（PIP） 此脚本需要 Python 3.6+ 和两个外部库。运行以下命令： pip install requests urllib3 requests – 用于发送灵活的 HT...
CVE-2026-22094 Weak root password in EVbee DC 80
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...
CVE-2026-22094 Weak root password in EVbee DC 80
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...
CVE-2026-22094
The firmware for the EVbee DC-80 contains a weak hardcoded root password . This vulnerability allows an attacker to gain root access by authenticating through the SSH daemon , which is exposed to the network. No specific remediation or exploit details are provided in the documents.
UBUNTU-CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
CVE-2026-92761
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...
EUVD-2026-81029
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...
CVE-2026-66408
The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account...
CVE-2026-66408
CVE-2026-66408 affects the DEEBOT PRO M1 and DEEBOT PRO K1VAC: the root accounts are configured with weak passwords. A user with physical access can obtain the root password, enabling privileged action on the device. The CVSS metrics indicate a physical attack with low complexity, but high confid...
CVE-2026-49005
The root password hash of the device can be obtained through unencrypted information in the firmware...
CVE-2026-49005 Root password hash exposure vulnerability in ZTE F689 product
The root password hash of the device can be obtained through unencrypted information in the firmware...
CVE-2026-49005
CVE-2026-49005 affects ZTE F689 devices, where the root password hash can be obtained from unencrypted firmware information. The CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) yields a LOW base score (2.4), indicating limited impact to confidentiality. The description confirms leakage of t...