12 matches found
Mikrotrick_POC
RouterOS SSH 模数混淆验证器 CVE-2026-67276 一个自动化行为验证器，用于检测 MikroTik RouterOS 中的 SSH 公钥认证绕过漏洞 CVE-2026-67276。 该脚本通过使用仅匹配目标公钥模数的伪造签名建立握手，来测试 SSH 服务的不完整验证缺陷是否允许认证绕过。 漏洞概述 CVE-2026-67276 源于 RouterOS SSH 守护进程处理器中 RSA 公钥验证不完整。在处理客户端的公钥认证请求时，受影响版本仅匹配密钥类型和 RSA 公钥模数 $n$ ，而省略了对公钥指数 $e$ 的验证。 拥有目标用户已配置 授权公钥...
MikroTik RouterOS 7.9 < 7.23.4 / 7.24.x < 7.24.2 SSH Authentication Bypass (CVE-2026-67276)
According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.9 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an authentication bypass vulnerability. RouterOS does not compare the complete RSA public key when matching ...
Exploit for CVE-2026-67276
RouterOS SSH Modulus-Confusion Validator CVE-2026-67276 An...
CVE-2025-11534
The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials...
EUVD-2023-2773
Malicious code in bioql PyPI...
EUVD-2022-32773
Malicious code in bioql PyPI...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 vul check tools This vulnerability allows an at...
PT-2024-2451
Name of the Vulnerable Software and Affected Versions XZ Utils versions 5.6.0 through 5.6.1 Description Malicious code was discovered in the upstream tarballs of xz. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file in t...
CVE-2023-43809
CVE-2023-43809 affects Soft Serve (Git server) prior to v0.6.2. The vulnerability stems from insufficient validation of the public-key step during the SSH handshake when keyboard-interactive authentication is enabled, allowing an unauthenticated, remote attacker to bypass public-key authenticatio...
CVE-2022-28321
The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pamaccess.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a...
freeFTPd 1.2.6 - Remote Authentication Bypass
FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting! Discovered & Exploited By Kingcope Year 2011 -- https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23079.zip Example banner: WeOnlyDo-wodFTPD 2.3.6.165 This...
