Abyssal

🔥 Abyssal CVE-2026-24061 Telnet Vulnerability Scanner & Exploit From the depths, we rise. Multi-threaded, false-positive detection, interactive root shell on success. 👨‍💻 About the Author This project was built by an experienced IT professional with decades of hands-on work in network security,...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Critical Remote Authentication Bypass in GNU Inetutils telnetd The ghost of 2015 just came back to own everything still running telnet. Zero authentication. One environment variable. Instant root shell. ⚠️ Overview CVE-2026-24061 is a critical remote privilege...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026–24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026–24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...

cve-2011-4862

cve-2011-4862 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying this patch to freeBSD, it would not accept it. Instead, we ha...

CVE-2026-24061-payload

CVE-2026-24061 - GNU InetUtils telnetd 参数注入认证绕过 GNU InetUtils 1.9.3 至 2.7 版本中的 telnetd 服务器存在远程认证绕过漏洞。telnetd 守护进程在将 USER 环境变量作为命令行参数传递给 login1 程序之前，未能正确清理该变量。当 telnet 客户端发送包含命令行标志（如 -f root）的 USER 环境变量时，telnetd 会直接将该未清理的值传递给 login 程序。login 工具会将 -f 标志解释为绕过认证的指令，从而允许攻击者在无需提供任何凭据的情况下获得未经授权的 root 访问权...

CVE-2026-24061

🔒 CVE-2026-24061 - Exploit Critical Authentication Flaw 🚀 Getting Started Welcome to the CVE-2026-24061 project. This application demonstrates a critical security flaw. It allows attackers to bypass authentication in GNU inetutils-telnetd. This README will guide you through downloading and runnin...

CVE-2026-24061

GNU InetUtils telnetd 参数注入认证绕过（CVE-2026-24061） 2026年1月，来自 GNU InetUtils 的 GNU telnetd 服务被Kyu Neushwaistein（又名 Carlos Cortes Alvarez） 发现存在认证绕过漏洞。该漏洞被追踪为 CVE-2026-24061，允许攻击者在无需提供有效凭据的情况下建立 Telnet 会话，从而获得对目标系统的未授权访问。该漏洞存在于 GNU telnetd 服务直至 2.7-2 版本的所有版本中，看起来就像是直接从 90 年代搬出来的。 这是一个参数注入漏洞（CWE-88），CVSS...

telnetd

telnetd Idk what to do here, ill edit soon, but its for the telnetd CVE-2026-24061...

telnetd-cve-2026-24061

Youtube Thanks for the python exploit...

CVE-2026-24061

CVE-2026-24061 Reproduction Steps Build the image root@kitploit: docker build -t telnetd-bypass . Start the container root@kitploit: docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Send the payload root@kitploit: USER='-f root' telnet -a 127.0.0.1 23 Output...

CVE-2026-24061

CVE-2026-24061 - telnetd auth bypass What it's about Argument injection in telnetd from GNU InetUtils. Versions 1.9.3 to 2.7. CVSS 9.8. On the CISA KEV list since 26.01.2026, meaning it's actively exploited in the wild. The whole trick is that telnetd takes the value of the USER environment...

CVE-2026-24061

text feat3 1change feat2 1feat test CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9....

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 概述 本仓库包含针对 GNU Inetutils telnetd 远程身份验证绕过漏洞的概念验证（PoC）利用代码。 该问题源于 telnetd 在调用 /bin/login 之前，未能正确清理通过 Telnet NEW‑ENVIRON 协商接收到的 USER 环境变量。 通过提供： root@kitploit: USER=-f root telnetd 实际上执行了： root@kitploit: /bin/login -f root...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation

CVE-2026-28372 — GNU inetutils telnetd Privilege Escalation PoC 👤 Author Mohammed Idrees Banyamer Jordan 🇯🇴 Instagram: @banyamersecurity Security Researcher | Offensive Security | Exploit Development 🧨 Exploit Title CVE‑2026‑28372 — GNU inetutils telnetd Privilege Escalation via...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation-main

CVE-2026-28372 — GNU inetutils telnetd Privilege Escalation PoC 👤 Author Mohammed Idrees Banyamer Jordan 🇯🇴 Instagram: @banyamersecurity Security Researcher | Offensive Security | Exploit Development 🧨 Exploit Title CVE‑2026‑28372 — GNU inetutils telnetd Privilege Escalation via...

scan-cve-2026-24061

CVE-2026-24061 Scanner – GNU inetutils telnetd Auth Bypass ⚠️ VERY IMPORTANT LEGAL NOTICE ⚠️ This tool is exclusively for educational purposes, security research, vulnerability analysis, and authorized testing. Any unauthorized use against systems you do not own or do not have explicit written...

CVE-2026-32746

🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...

CVE-2026-24061

-c0392b?style=flat GNU InetUtils telnetd - Unauthenticated Remote Root via NEW-ENVIRON Variable Injection Overview - Technical Analysis - Affected Versions - Usage - Remediation - References Vulnerability Overview CVE-2026-24061 is a critical authentication bypass vulnerability in the telnetd...

CVE-2026-24061---telnetd

CVE-2026-24061 – telnetd 🔥 Description CVE-2026-24061 is a critical vulnerability affecting certain implementations of telnetd , allowing an authentication bypass and the obtainment of a remote root shell without valid credentials. This repository provides a Proof of Concept PoC for detecting...

tscan

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based scanner for detecting and exploiting the CVE-2026-24061 vulnerability in GNU Inetutils telnetd services. This tool scans IP addresses or networks for vulnerable telnetd services that allow authentication bypass leading to root shell access...