CVE-2022-37932

HP 交换机固件认证绕过漏洞 CVE-2022-37932 固件版本：PD.02.21 受影响的设备：HP 1920系列智能托管交换机 概述 本仓库记录了运行固件版本 PD.02.21 的 HP 1920 系列智能托管交换机中的一个关键认证绕过漏洞。该漏洞允许未经认证的攻击者在无需事先认证的情况下更改管理员密码，从而完全接管设备。 技术细节 该漏洞存在于 /login/defaultpasswordcfg.lua 脚本中，该脚本负责处理设备的默认密码更改。此脚本： 1. 接受表单 POST 请求，但不检查用户是否已认证 2. 仅验证 oldPwd 参数是否与默认密码（为空/空值）匹配 3...

Decrypt-passwords-for-Huawei-routers-and-switches-CVE-2012-4960

Huaweiルーターおよびスイッチのパスワード復号/CVE-2012-4960 複数のHuawei製品では、パスワードにDES暗号化アルゴリズムが使用されており、その暗号化は十分強力ではないため、解読される可能性があります。 この脆弱性には、Common Vulnerabilities and Exposures CVE ID: CVE-2012-4960 が割り当てられています。 要件 python のインストール pycryptodome のインストール 現在までに判明している影響を受ける製品/CVE-2012-4960 CX200/CX300 CX600 NE5000E MA520...

CVE-2026-88263

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

CVE-2026-88263

XikeStor Layer3 switches have a missing-authentication flaw that allows an unauthenticated attacker to download configuration data over the network. The retrieved data may contain network configurations and passwords , enabling an attacker to operate the switch improperly or use it as a jump host...

EUVD-2026-80224

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

CVE-2026-88263

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco is a snmp scanner that can be used both for internal testing and external testing to assess Cisco Nexus switches 5000 and 6000 family. There are many snmp scanners and brute forcers this was made for just completeness.It has the...

CVE-2023-36845

CVE-2023-36845 説明 CVE-2023-36845 は、Juniper SRX ファイアウォールおよび EX スイッチに影響を与える注目すべき PHP 環境変数操作の脆弱性です。Juniper はこの脆弱性を中程度の深刻度と分類していますが、本記事では、この単一の脆弱性をリモートから認証なしでコード実行に悪用する方法を詳しく説明します。 検索 - Shodan root@kitploit: title:"Juniper Web Device Manager" root@kitploit: title:"Juniper" http.favicon.hash:214172473...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

cve-2026-1668-poc

针对 CVE-2026-1668 的概念验证漏洞利用程序 这是针对 CVE-2026-1668 的概念验证漏洞利用程序。它仅用于教育目的。请勿尝试利用您不拥有或未经明确许可的系统。 该概念验证是针对具有以下 SHA256 哈希的固件镜像开发的：4b862b8dd7fde44fa57a39b35b562f21878dd6abb8e92ccd9cdef571ed60d544。 已知与该哈希匹配的固件名称（非详尽列表）： SG2005P-PDv1en1.0.1620251031-rel72837up.bin SG2008Pv3en3.20.1420251031-rel72837up.bin...

CVE-2026-73764

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

EUVD-2026-69643

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery CSRF protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an...

CVE-2026-73779 Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

EUVD-2026-69642

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

EUVD-2026-69640

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls...

EUVD-2026-69628

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

PT-2026-84482

Name of the Vulnerable Software and Affected Versions AOS-CX switches affected versions not specified Description Issues in the operating system of AOS-CX switches may allow an unauthenticated remote actor to bypass authentication controls. This could lead to the unauthorized modification of...

PT-2026-84497

Name of the Vulnerable Software and Affected Versions AOS-CX switches affected versions not specified Description The web-based management interface lacks Cross-Site Request Forgery CSRF protection for certain sessions. This allows a remote unauthenticated attacker to execute arbitrary input...

HPESBNW05134 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking ArubaOS-CX (AOS-CX)

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series - Please refer to Vulnerability Summary for Impacted Versions Aruba CX 4100i Switch Series - Please refer to Vulnerability Summary for Impacted...

Astra Linux – Vulnerability in OVN

A flaw was discovered in the Open Virtual Network OVN. Specifically, specially crafted UDP packets may bypass egress access control lists ACLs in OVN installations that are configured with a logical switch equipped with DNS records. This occurs if the same switch has any egress ACLs configured...