Poc-CVE-2024-57040

Poc-CVE-2024-57040 CVE-2024-57040 是某些 TP-Link TL-WR845N 路由器型号中存在的一个安全漏洞。具体来说，它涉及路由器 root 账户的“硬编码”密码。这意味着路由器软件中内置了一个默认且不可更改的密码。 受影响设备： 该漏洞影响以下固件版本： TL-WR845NUNV4190219 TL-WR845NUNV4200909 TL-WR845NUNV4201214 利用的关键条件： 路由器必须使用其默认登录凭据。 如果路由器的密码已从默认密码更改，则漏洞无法利用。 这意味着路由器必须处于出厂默认状态，或者从未更改过密码。...

CVE-2026-1459-POC

CVE-2026-1459-POC CVE-2026-1459 的 POC，其载荷会更改 root 的 SSH 密码。 需要有效的管理员凭据，会临时更改 root 密码，重启后将重置 root 密码。 适用于 VMG3625-T50B 及类似设备，保证在固件 V5.50ABPM.9.7C0 或更早版本上有效。...

CVE-2016-5195

dirtycow 此漏洞利用以 dirtycow 漏洞的 pokemon 利用方法为基础，并自动生成新的 passwd 行。 运行该二进制文件时，系统会提示用户输入新密码。 原始 /etc/passwd 文件随后会被备份到 /tmp/passwd.bak，并用生成的行覆盖 root 账户。 运行此漏洞利用后，您应该可以使用新创建的用户登录。 要使用此漏洞利用，请根据您的需要修改用户值。 默认创建的用户是 firefart。 原始漏洞利用（dirtycow 的 ptracepokedata“pokemon”方法）：...

CVE-2026-100392 InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form()` (Missing Object-Level Authorization)

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Users::form performs no object-level authorization check on userid = 1. A Secondary Administrator usertype = 1, userid != 1 can rewrite the Primary Administrator's usertype to 2...

CVE-2023-43149

CVE-2023-43149 作者 : Aitor Herrero Fuentes 厂商: SPA-Cart 厂商主页: https://spa-cart.com/ 软件链接: https://demo.spa-cart.com/admin 版本: 1.9.0.3 测试环境: Windows 10 Pro CSRF 添加根账户 Cross Site Request Forgery 漏洞存在于 demo.spa-cart.com 应用程序中，允许远程攻击者执行任意代码，只需一次点击即可添加一个具有“角色状态”的恶意用户。 当恶意行为者能够诱骗受害者执行他们本不打算执行的操作时，就会发生...

CVE-2026-88956

The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's...

CVE-2026-88956 Botslab G980H Dashcams Missing Authentication for Critical Function

The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's...

CVE-2026-88956

The Botslab G980H dash camera firmware is vulnerable to an authentication vulnerability involving the root account accessible via the device's UART interface . Because the account does not require a password, an unauthenticated attacker with physical access to the device can connect to the UART i...

EUVD-2026-86454

The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's...

CVE-2026-88956: Missing Authentication for Critical Function

The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's...

EUVD-2026-84683

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords are stored as reversible hashes in /etc/shadow, recoverable using dictionary-based cracking tools. Attackers can use the recovered credentials to authenticate via Telnet or SSH and obtain...

CVE-2025-15679

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679 BMC root account active without password on BullSequana XH3406 and XH3515

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679 BMC root account active without password on BullSequana XH3406 and XH3515

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679

CVE-2025-15679 affects the BMC (Baseboard Management Controller) root account , which can become active without a password under certain circumstances such as a reset to factory default operation. This grants unauthenticated local access with HIGH impact on confidentiality, integrity, and availab...

EUVD-2025-210890

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

PT-2026-89807

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password...

CVE-2025-15679: Empty Password in Configuration File

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

PT-2026-85524

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

EUVD-2026-68921

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access or allowed to change their own shell access to...