TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30075 このツールは、TP-Link Archer AX50およびその他の一部のTP-Linkルーターモデルに存在する CVE-2022-30075 の脆弱性を利用して、認証済みリモートコード実行（Authenticated Remote Code Execution）を行います。 TP-Link Router Authenticated RCE Exploit CVE-2022-30075 このツールは、TP-Link Archer...

CVE-2025-65731

CVE-2025-65731 CWE-1191: 片上调试与测试接口访问控制不当 D-Link DIR-605L 上的 UART 根 Shell 访问漏洞（硬件 F1，固件 V6.02CN02） 概述 在 D-Link DIR-605L 路由器（硬件版本 F1，固件外部版本 V6.02CN02，运行 Linux 内核 2.4.18）中发现了一个严重的硬件安全漏洞。UART 调试接口缺乏适当的访问控制机制，任何拥有物理访问权限的攻击者均可连接到 UART 引脚，获取未经过身份验证的根 Shell 访问权限。此漏洞对应 CWE-1191：片上调试与测试接口访问控制不当。 受影响产品：...

tscan

Telnetd 认证绕过扫描器 CVE-2026-24061 一个基于 Python 的扫描器，用于检测和利用 GNU Inetutils telnetd 服务中的 CVE-2026-24061 漏洞。该工具可扫描 IP 地址或网络，查找存在认证绕过漏洞的 telnetd 服务，该漏洞可导致获取 root shell 访问权限。 ⚠️ 重要法律声明与免责声明 本软件仅用于教育和授权安全测试目的。 1. 教育目的 本应用程序的开发仅用于教育目的 ，以演示安全漏洞并协助进行授权的安全测试和研究。 2. 无担保 本软件按"原样"提供，不附带任何明示或暗示的担保...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer

NVIDIA GPUs with GDDR memories have been shown susceptible to Rowhammer-based bit-flips, similar to CPUs. However, Rowhammer exploits on GPUs have been limited to injecting untargeted bit-flips in victim data like weights of machine learning models, to degrade model accuracy, unlike CPU exploits...

CVE-2026-42373

D-Link DIR-605L Hardware Revision B2 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn76dlwbrdir605L" read from /etc/alphaconfig/imagesign. The custom telnetd binary...

CVE-2026-42375

D-Link DIR-600L A1 (End-of-Life) is affected by CVE-2026-42375 due to a hardcoded telnet backdoor. The device runs a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u u...

CVE-2026-42374

D-Link DIR-600L Hardware Revision B1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn61dlwbrdir600L" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...

EUVD-2026-27021

D-Link DIR-605L Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir605l" read from /etc/alphaconfig/imagesign. The custom telnetd binary...

CVE-2026-21915

The CVE describes a vulnerability in Juniper Networks’ JSI Virtual Lightweight Collector (vLWC). A Permissive List of Allowed Input in the CLI enables local, high-privilege attackers to inject shell commands that run with root permissions, potentially yielding full system control. Affected: all J...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

🧨 Metasploitable 2 Penetration Testing Lab 📅 Duration 2026...

CVE-2026-24740

CVE-2026-24740 affects Dozzle before v9.0.3, where a flaw in agent-backed shell endpoints lets a label-filtered user obtain an interactive root shell in out-of-scope containers on the same agent. A patch exists in v9.0.3; upgrade to 9.0.3+ or apply the vendor fix to remediate. Exploitation detail...

Raisecomm RAX701-GC Series

RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication and gain unauthenticated root shell access to the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

TP-Link Omada gateways 安全漏洞

TP-Link Omada gateways is a security gateway from China P&L TP-Link. A security vulnerability exists in TP-Link Omada gateways, which originates from restricted conditions where an attacker can gain access to the underlying operating system root shell...

CVE-2025-60856

Reolink Video Doorbell WiFi DB566128M5MPW allows root shell access through an unsecured UART/serial console. An attacker with physical access can connect to the exposed interface and execute arbitrary commands with root privileges. NOTE: this is disputed by the Supplier because of "certain...

EUVD-2017-5832

Malware in sbrugna...

EUVD-2019-7072

Malware in sbrugna...

EUVD-2018-7249

Malware in sbrugna...

EUVD-2021-21372

Malware in sbrugna...

EUVD-2020-2717

Malware in sbrugna...