CVE-2022-46080

EN 该项目提供了一个针对Nexxt路由器远程代码执行（RCE）漏洞的概念验证利用工具，特别针对版本15.03.06.60。该漏洞允许攻击者无需认证即可在路由器上启用Telnet服务，从而可能获得未经授权的访问。 CVE参考 CVE-2022-46080 （Nexxt路由器RCE利用） 功能 无认证远程代码执行 ：利用该漏洞执行任意代码。 Telnet服务激活 ：使用指定的密码和端口在路由器上启用Telnet服务。 使用方法 前提条件 Python 3.x requests库 安装 pip install requests 运行利用工具 要执行利用，请使用以下命令格式： python...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst 远程代码执行 PoC 本仓库包含用于利用 Cisco Systems 于 2017 年 3 月 17 日披露的远程代码执行漏洞的概念验证（Proof-Of-Concept）代码 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp 描述...

CVE-2020-25749

CVE-2020-25749 建议描述 Rubetek摄像机RV-3406、RV-3409和RV-3411的Telnet服务（固件版本v342、v339）可能允许远程攻击者通过高权限账户完全控制设备。该漏洞源于系统账户使用了默认且静态的密码。Telnet服务无法禁用，且无法通过标准功能更改此密码。 附加信息 已向供应商发送关于该漏洞的信函。 漏洞类型 其他 CWE-798: 使用硬编码凭证 产品供应商 Rubetek https://rubetek.com/ 受影响产品代码库 摄像机RV-3406 - 固件版本339和342受影响。无修复版本。 摄像机RV-3409 -...

CVE-2017-3881

CVE-2017-3881 Cisco IOS 远程代码执行 =================== 本仓库包含针对思科系统于 2017 年 3 月 17 日披露的远程代码执行漏洞的 PoC 代码 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp 描述 漏洞利用文章见 - https://artkond.com/2017/04/10/cisco-catalyst-remote-code-execution/ RCE 利用代码适用于 Cisco...

CVE-2020-25747

CVE-2020-25747 Descripción sugerida El servicio Telnet de las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339 puede permitir a un atacante remoto obtener acceso a los servicios RTSP y ONVIF sin autenticación. Por lo tanto, el atacante puede ver transmisiones en vivo de...

CVE-2025-9090

CVE-2025-9090 作者：Byte Reaper 描述 此漏洞利用程序针对 CVE-2025-9090 ，这是 Tenda AC20 v16.03.08.12 路由器中的一个命令注入漏洞。 该漏洞位于端点 /goform/telnet，可远程触发。 访问该端点后，会启动设备上的 Telnet 服务，开放端口 23/2323 用于远程交互。 程序向该易受攻击的端点发送请求，查找响应字符串 "load telnetd success" ，然后尝试连接 Telnet 服务以确认利用成功。 构建 使用 gcc 编译： gcc exploit.c argparse.c -o...

chall2026-telneted

@Hack 2026: Telneted Escrito por Harsh. Categoría : Pwn Resueltos : 34/120 Etiquetas : beginner Protocolo : telnet El equipo de reconocimiento ha encontrado otro punto final en la red de los Alienígenas, pero parece que no podemos conectarnos a él con nuestras herramientas. Las capturas de red...

CVE-2026-13313

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

PT-2026-103657

Name of the Vulnerable Software and Affected Versions ASUS router affected versions not specified Description An Active Debug Code issue allows a remote authenticated user to bypass security mechanisms by sending a crafted HTTP request. This action enables the Telnet service, allowing the executi...

CVE-2026-7193

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...

VulnCheck KEV: CVE-2025-9090

A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2026-51664: Improper Access Control

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-66405

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products...

CVE-2026-66405

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products...

EUVD-2026-54833

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configurati...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...

EUVD-2026-34274

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-35904: Improper Access Control

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...