CVE-2026-24061

Эксплойт CVE-2026-24061 Telnet RCE — от SafeBreach Labs Этот скрипт эксплуатирует уязвимость CVE-2026-24061 в Telnet-серверах, используя некорректно сформированную переменную окружения USER. Использование Запустите скрипт с указанием целевого хоста: python telnetrce.py -p Аргументы host: IP-адрес...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ Cet outil est créé uniquement à des fins éducatives. Toute utilisation non autorisée en dehors d'environnements contrôlés est strictement interdite. CVE-2026-24061 est une vulnérabilité critique CVSS 9.8 dans telnetd de GNU Inetutils versions 1.9.3–2.7 qui permet à un attaqua...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Доказательство концепции PoC ⚠️ ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: ТОЛЬКО ДЛЯ ОБРАЗОВАТЕЛЬНЫХ ЦЕЛЕЙ ⚠️ Этот репозиторий содержит доказательство концепции PoC эксплойта для CVE-2026-24061. Он предназначен строго для образовательных целей и для тестирования систем в контролируемой лабораторной...

CVE-2026-24061

Обход аутентификации в GNU InetUtils telnetd через внедрение аргументов - CVE-2026-24061 📚 Введение Недавно выявленная уязвимость внедрения аргументов в GNU InetUtils telnetd позволяет злоумышленникам обойти аутентификацию, установив переменную окружения USER в значение «-f root». В результате...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

CVE-2026-24061

CVE-2026-24061 - Обход аутентификации через инъекцию аргументов в telnetd GNU InetUtils Версии GNU InetUtils с 1.9.3 по 2.7 уязвимы к удаленному обходу аутентификации в сервере telnetd. Демон telnetd неправильно очищает переменную окружения USER перед передачей её в качестве аргумента командной...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : Vulnérabilité de contournement d'authentification dans telnetd de GNU InetUtils CVE-2026–24061 est une faille critique dans le service telnetd de GNU InetUtils Identifiant CVE : CVE-2026–24061 Sévérité : Critique CVSS 9.8 Vecteur d'attaque : Réseau Authentification requise : Aucu...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 CVE-2026-24061-PoC Overview An argument inj...

PT-2026-51290

Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of the user loading the file or other data in the file...

EUVD-2026-37932

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

CVE-2026-12505

A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...

Adobe Acrobat Reader 代码问题漏洞

Adobe Acrobat Reader is a PDF viewer developed by Adobe Inc. in the United States. This software is used for printing, signing, and annotating PDF documents. Versions of Adobe Acrobat Reader such as 24.001.30365, 26.001.21651, and earlier versions have code vulnerabilities. These vulnerabilities...

Adobe Dreamweaver Desktop 缓冲区错误漏洞

Adobe Dreamweaver Desktop is a web design and development software provided by Adobe, a company based in America. Versions of Adobe Dreamweaver Desktop starting from 21.7 and earlier contain a buffer error vulnerability. This vulnerability stems from accessing uninitialized pointers, which may...

Adobe Campaign Classic 安全漏洞

Adobe Campaign Classic is a enterprise-level marketing automation and campaign management platform developed by Adobe Inc. Adobe Campaign Classic 7.4.3 build 9394 and earlier versions have a security vulnerability that stems from improper authorization, which may allow for the execution of...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass...

CVE-2026-35353

The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions typically 0755 before subsequently changing them to the requested mode via a separate chmod system call. In multi-user environments, this introduces ...

EUVD-2026-25015

The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This causes the file to inherit umask-based permissions, typically resulting in a world-readable file 0644. In multi-user environments, this allows any user on the...

Duplicate Advisory: uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mj6p-44ch-cq69. This link is maintained to preserve external references. Original Description The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory...

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils, which stems from the lack of explicit permission restrictions when nohup is used to create the default output file. This vulnerability could allow any user in...