CVE-2026-24061-POC

CVE-2026-24061 - Обход аутентификации в telnetd PoC Критический обход аутентификации в telnetd, приводящий к выполнению кода с правами root Затрагивает системы с версиями telnetd, содержащими уязвимость, начиная с 2015 года О уязвимости Данный PoC демонстрирует CVE-2026-24061 — критическую...

CVE-2026-24061

Инструмент массового сканирования уязвимости CVE-2026-24061 ⚠️ Внимание : CVE-2026-24061 GNU Inetutils — это набор классических сетевых утилит от проекта GNU, включающий службу telnetd, то есть демон Telnet-сервера. В версиях с 1.9.3 по 2.7 в службе telnetd существует критический дефект в процессе...

CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template для обнаружения уязвимости CVE-2026-24061 в GNU inetutils telnetd, позволяющей получить root доступ без аутентификации. 📋 Описание уязвимости CVE-2026-24061 - это критическая уязвимость argument injection в GNU inetutils telnetd, которая...

telnet-inetutils-auth-bypass-CVE-2026-24061

CVE-2026-24061: Обход аутентификации в GNU inetutils-telnetd Docker-лаборатория для демонстрации CVE-2026-24061 — критической уязвимости обхода аутентификации в GNU inetutils telnetd, которая оставалась без исправления в течение 11 лет. Уязвимость Telnetd передаёт переменную окружения USER напрям...

CVE-2026-24061-NSE

CVE-2026-24061 — Обход аутентификации в GNU InetUtils telnetd Nmap NSE-скрипт обнаружения Обзор Этот Nmap NSE-скрипт обнаруживает CVE-2026-24061 — уязвимость обхода аутентификации в GNU InetUtils telnetd версий 1.9.3–2.7. Отправляя специально сформированную переменную окружения USER вида -f во...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — GNU Inetutils Telnetd Authentication Bypass...

BIT-CASSANDRA-2026-47846 Default superuser cassandra:cassandra left active when CASSANDRA_USER is customized

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

Astra Linux – Vulnerability in inetutils

In GNU inetutils, the telnet utility in version 2.7 allows servers to read arbitrary environment variables from clients using the NEWENVIRON SENDUSERVAR function...

CVE-2026-32772

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEWENVIRON SEND USERVAR...

EUVD-2026-12154

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEWENVIRON SEND USERVAR...

CVE-2026-32772

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEWENVIRON SEND USERVAR...

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Detection Tool ⚠️ Note: C...

The vulnerability of the telnetd server in the Inetutils network programming package allows a hacker to bypass existing security mechanisms.

The vulnerability of the telnetd server in the Inetutils network programming package is related to improper handling of arguments in the command when processing the USER variable. Exploitation of this vulnerability allows a remote attacker to bypass existing security mechanisms by executing a...

Linux Distros Unpatched Vulnerability : CVE-2025-61789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom...

EUVD-2000-0613

Malware in sbrugna...

CVE-2024-12651

Exposed Dangerous Method or Function vulnerability in PTT Inc. HGS Mobile App allows Manipulating User-Controlled Variables. This issue affects HGS Mobile App: before 6.5.0...

PT-2024-36529 · Unknown · Winmail Server

Name of the Vulnerable Software and Affected Versions: Winmail Server version 4.4 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It involves the f user variable and a specific payload %22%3E%3Csvg%20onload. This type of attack can allow an attacker to inject malicious...

CVE-2023-33175 ToUI allows user-specific variables to be shared between users

ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...

SUSE CVE-2010-3835

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service mysqld server crash by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be...

PT-2018-14634

Name of the Vulnerable Software and Affected Versions SaltOS version 3.1 r8126 Description The issue allows for SQL Injection through the user variable in the action=login endpoint. This can be exploited by injecting malicious SQL code as the user value. Recommendations For SaltOS version 3.1...