DSL-2750U-Full-chain

firmware-analysis 1. Bug del DSL-2750U : errata configurazione del server tftp CVE-2021-3707 bug di iniezione dei comandi CVE-2021-3708...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-è-vulnerabile-ad-attacco-Denial-of-Service-DoS CVE-2020-25478 - Il TFTP di ASUS RT-AC87U è vulnerabile ad un attacco Denial of Service DoS 1. NOME DEL PRODOTTO/I AFFETTO/I E DELLA VERSIONE/E ASUS RT-AC87U 3.0.0.4.38251640 2. TIPO DI PROBLEMA È principalmente correlato a CWE-20,...

provisioner

Provisioner Panoramica Provisioner è un assistente di provisioning orientato agli sviluppatori per computer a scheda singola SBC, in particolare piattaforme basate su U-Boot. Fornisce un ambiente autonomo per: Accedere alle schede in remoto Automatizzare i flussi di lavoro di avvio Provisionare...

dotdotpwn

DESCRIZIONE DotDotPwn - Il Fuzzer per Directory Traversal È un fuzzer molto flessibile e intelligente per scoprire vulnerabilità di directory traversal in software come server HTTP/FTP/TFTP, piattaforme web come CMS, ERP, Blog, ecc. Inoltre, dispone di un modulo indipendente dal protocollo per...

CVE-2006-6184

CVE-2006-6184 Questo è un exploit standalone basato su Python per CVE-2006-6184. Questo exploit sfrutta un buffer overflow basato sullo stack in Allied Telesyn TFTP Server AT-TFTP 1.9, e probabilmente versioni precedenti, consentendo a un attaccante remoto di causare un denial of service o esegui...

cve-2006-6184

CVE-2006-6184 Questo è un exploit standalone basato su Python per la CVE-2006-6184. Questo exploit innesca un buffer overflow basato su stack in Allied Telesyn TFTP Server AT-TFTP 1.9, e possibilmente versioni precedenti, consentendo a un attaccante remoto di causare un denial of service o esegui...

CVE-2023-33669

CVE-2023-33669 Exploit Exploit für eine Stapelüberlauf-Schwachstelle im Tenda AC8 Router, der gezielt auf die Firmware-Version USAC8V4.0siV16.03.34.06 abzielt. Offizielle Produktseite. Emulation Du kannst die Datei 'prepare.sh' in das Root-Verzeichnis der Firmware legen und sie ausführen. Außerde...

dotdotpwn

DESCRIPTION DotDotPwn - The Directory Traversal Fuzzer It's a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc. Also, it has a protocol-independent module to send the desired...

TFTPlunder

TFTPlunder: un exploit per CVE-2023-29930 Questo è uno script di exploit per una vulnerabilità di lettura/scrittura cieca di file nel server di provisioning TFTP di Genesys ex InIn. Informazioni sulla vulnerabilità Questa vulnerabilità è dovuta a opzioni di configurazione senza restrizioni per il...

iCULeak.py

iCULeak.py Strumento per trovare ed estrarre credenziali da file di configurazione telefonici in ambienti gestiti da Cisco CUCM Call Manager. Quando si utilizza Cisco CUCM Call Manager, i file di configurazione dei telefoni sono archiviati su un server TFTP. Questi file di configurazione dei...

Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-68820...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62893

CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

TFTP Fetch, Linux dup2 Command Shell, Reverse TCP Stager

Fetch and execute an RISC-V 64-bit payload from a TFTP server. dup2 socket in s1, then execve. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule includ...

OESA-2026-2704 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Relative Path Traversal, Improper Isolation or...

OESA-2026-2705 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Relative Path Traversal, Improper Isolation or...

CVE-2020-37250 TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation

TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code with system privileges. Attackers can place a malicious executable in the Program Files directory path that will be executed during servi...

CVE-2020-37250

CVE-2020-37250 affects TFTP Broadband 4.3.0.1465 where the unquoted service path in the tftpt.exe service binary enables local privilege escalation to LocalSystem by placing a malicious executable in the Program Files path that is executed at service startup or system reboot. The vulnerability is...