232 matches found
CVE-2024-29972
TG Join Us https://t.me/WanLiChangChengWanLiChang Присоединяйтесь к нам, чтобы регулярно получать различные EXP POC уязвимостей. CVE-2024-29972-EXP CVE-2024-29972 Zyxel NAS — бэкдор-учётная запись, неавторизованное открытие. FOFA app="ZyXEL-NAS326" Примечания Этот скрипт эксплойта является...
DblTekGoIPPwn
DblTekGoIPPwn Инструмент для эксплуатации системы вызов-ответ в уязвимых устройствах DblTek GoIP. Может генерировать ответы на заданные вызовы, проверять хосты на уязвимость, выполнять команды на уязвимых хостах, отправлять SMS-сообщения с хоста и получать root-доступ к любому уязвимому хосту...
KevinLAB BEMS (Building Energy Management System) - Backdoor Account
KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...
dlink
D-Link NASデバイスにおけるコマンドインジェクションとバックドアアカウント 脆弱性の概要: 本脆弱性は、DNS-340L、DNS-320L、DNS-327L、DNS-325などの複数のD-Link NASデバイスに影響を及ぼします。この脆弱性は nassharing.cgi URI内に存在し、主に2つの問題によって引き起こされます: ハードコードされた認証情報によって可能になるバックドアと、system パラメータを介したコマンドインジェクションの脆弱性です。この悪用により、影響を受けるD-Link...
honeypot-dlink-CVE-2024-3273
honeypot-dlink-CVE-2024-3273 Быстрый и грубый honeypot для CVE-2024-3273. Этот шаблон позволяет развернуть базовый honeypot примерно за 10 минут. Кратко: Найдите fofa, shodan, onyphe, .... Клонируйте его с помощью wgetclonehttp.sh. Ручная доводка, чтобы сделать honeypot более реалистичным...
vuln-chain-lab
File Upload Bypass + Stored XSS PoC Lab Намеренно уязвимое веб-приложение, демонстрирующее, как обход загрузки файлов сочетается с хранимой XSS для создания бэкдор-учетных записей администратора, даже при наличии CSP, CORS и CSRF-защиты. Полная статья в блоге: KurtiseBear Blog Это образовательный...
CVE-2019-19033
CVE-2019-19033: Учётная запись-бэкдор / Обход аутентификации в Jalios JCMS 10 I. УЯЗВИМОСТЬ Jalios JCMS 10 позволяет злоумышленникам получить доступ к любой части сайта и сервера WebDAV с привилегиями администратора через учётную запись-бэкдор, используя любое имя пользователя и определённый...
D-Link Network Attached Storage - Backdoor Account
A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...
CVE-2026-52520
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
D-Link Network Attached Storage - Command Injection and Backdoor Account
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...
CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
CVE-2026-42289
ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and permission updates entirely through $POST parameters with no CSRF token validation. An unauthenticated attacker can craft a malicious HTML page that, when visited by an...
CVE-2020-37135
AMSS++ 4.7 is affected by an authentication bypass that lets attackers access administrative accounts using hardcoded credentials (default admin/admin or admin/1234 depending on source), enabling unauthorized admin access. The vulnerability is documented across multiple feeds (CVE-2020-37135) wit...
CVE-2020-37135 AMSS++ 4.7 - Backdoor Admin Account
AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system...
CVE-2023-53895
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...
CVE-2023-53895
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...
CVE-2023-53895 PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...
PT-2025-51743
Name of the Vulnerable Software and Affected Versions PimpMyLog version 1.7.14 Description The software contains an improper access control issue that allows remote attackers to create administrator accounts without authorization through the configuration endpoint. Attackers can exploit the...
