CVE-2026-24061

CVE-2026-24061 Telnet RCE 漏洞利用 - 由 SafeBreach Labs 开发 该脚本通过畸形的 USER 环境变量来利用 Telnet 服务器中的 CVE-2026-24061 漏洞。 用法 使用目标主机运行脚本： root@kitploit: python telnetrce.py -p 参数 host：目标 IP 地址或主机名（必填） -p, --port：目标端口（默认：23） 示例 root@kitploit: python telnetrce.py 192.168.1.100 python telnetrce.py example.com -p 2...

Kangaroo

Kangaroo 一款可绕过运行 2.7 或更低版本的 telnet 服务器身份验证的漏洞利用工具。 又名 cve-2026-32746 如何防范此攻击 禁用 Telnet：如果不需要，请立即停止并关闭服务器和网络设备上的 telnetd 守护进程。封锁端口 23：使用防火墙或网络规则阻止所有对 TCP 端口 23 的外部访问，使互联网上的用户无法访问该服务。更新软件：查看系统供应商或 GNU Inetutils 的更新，以获取包含该漏洞修复的 2.7 以上版本。改用 SSH：用安全外壳（Secure Shell，ssh）替代 Telnet，它对连接进行加密，并且对远程管理来说安全得多。...

root-my-webos-tv

破解我的 webOS 电视 一个简单的 Python 脚本，用于在存在漏洞的 webOS 设备上以 root 身份启动 telnet 服务器。 已验证的电视型号 webOS 4.9.7 - 5.30.40 （型号 LG43UM7000PLA ） webOS 5.5.0 - 04.50.51 （型号 OLED55CXPUA ） webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 （型号 OLED48C1PUB ） webOS 7.3.1-43 mullet-mebin - 03.33.85 （型号 OLED55A23LA ） 安装 1. 从...

telnet-iot-honeypot

免責事項 このプロジェクトはもうサポートも開発もされていません。Python2に基づいており、2020年にEOLに達し、時間とともにインストールが困難になる依存関係を使用しています。自己責任で使用してください！ Telnet IoT ハニーポット 'ボットネットのバイナリを捕獲するためのPython telnetハニーポット' このプロジェクトは、インターネット上のtelnetサーバーで恐ろしく安全でないデフォルトパスワードを介して拡散するIoTマルウェアのハニーポットとして機能するPython telnetサーバーを実装しています。 ハニーポットは、Cowrie...

CVE-2026-56740

A flaw was found in the JLine3 Telnet server remote-telnet module. An unauthenticated remote attacker can exploit this vulnerability by injecting an excessive number of environment variables through the Telnet NEW-ENVIRON option. This action causes the server to store numerous variable pairs,...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Host Servers

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17223, CVE-2026-17206, CVE-2026-17208, CVE-2026-16929, CVE-2026-17004, CVE-2026-18846, CVE-2026-17197, CVE-2026-17217, CVE-2026-17199, CVE-2026-17229, CVE-2026-16982 in host servers, and a buffer overflow CVE-2026-17220 in host,...

Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App

Overview Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc. web server for debugging purposes remains enabled CWE-489 - CVE-2026-66403 Missing serv...

Linux Distros Unpatched Vulnerability : CVE-2026-56740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number...

Linux Distros Unpatched Vulnerability : CVE-2026-56741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper...

DEBIAN-CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

DEBIAN-CVE-2026-56741

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

AZL-92453 CVE-2026-56741 affecting package jline 2.14.6-1

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine3 Telnet server remote-telnet module in JLine prior to versions 3.30.14, 4.0.16, and 4.2.1 does not limit the number of environment variables injected via Telnet NEW-ENVIRON. TelnetIO.readNEVariables() stores each variable pair in a HashMap within ConnectionData (lines 1127-1180), allowing a...

CVE-2026-56741 JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

Summary The JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option. An unauthenticated attacker can flood the server with a large number of unique variable pairs before sending the terminating IAC SE byte,...

GHSA-2R2C-CX56-8933 JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

Summary The JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS Negotiate About Window Size option. An unauthenticated remote attacker can send a NAWS subnegotiation advertising a 65535×65535 terminal and repeatedly alternate...

PT-2026-60884

Name of the Vulnerable Software and Affected Versions JLine versions prior to 3.30.14 JLine versions prior to 4.0.16 JLine versions prior to 4.2.1 Description The JLine3 Telnet server remote-telnet module fails to limit the number of environment variables a client can inject using the Telnet...