CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link रिमोट कोड निष्पादन RCE एक्सप्लॉइट विवरण इस रिपॉजिटरी में CVE-2024-3273 के लिए एक एक्सप्लॉइट है, जो विशिष्ट D-Link उपकरणों में पाई गई एक गंभीर कमजोरी है जो रिमोट कोड निष्पादन RCE की अनुमति देती है। यह कमजोरी nassharing.cgi CGI स्क्रिप्ट्स में अनुचित इनपुट सत्यापन के कारण...

shellshock-cgi

shellshock-cgi نص بايثون لتعداد نصوص CGI المعرضة لـ CVE-2014-6271 على خادم واحد محدد الاستخدام root@kitploit: $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 مثال على الإرجاع: root@kitploit: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for...

PoC-CVE-2021-41773

CVE-2021-41773 PoC إثبات المفهوم للتحقق مما إذا كانت المضيفين عرضة لثغرة CVE-2021-41773. الوصف https://vulners.com/cve/CVE-2021-41773 تم العثور على خلل في تغيير تم إجراؤه على تطبيع المسار في Apache HTTP Server 2.4.49-2.4.50. يمكن للمهاجم استخدام هجوم اجتياز المسار لتعيين عناوين URL إلى ملفات خارج...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586

CVE-2026-63586 is a critical (CVSS 3.1: 9.8) unauthenticated remote code execution vulnerability in a web-based management interface that uses a modified uhttpd server with CGI shell scripts. The root cause is a shell injection flaw: the HTTP Basic Authentication username is taken directly from t...

shocknaww

shocknaww نص بسيط للتحقق من CVE-2014-6271 مثال الاستخدام root@kitploit: ./shocknaww.py http://foo.bar/cgi-bin/foo بيئة ضعيفة نموذجية من المجلد الأصلي، قم بتشغيل ما يلي. root@kitploit: python -m CGIHTTPServer الآن استخدم shocknaww ضد خادم الاختبار المحلي الخاص بك. root@kitploit: ./shocknaww.py...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE विवरण : इस रिपॉजिटरी में CVE-2025-54769 के लिए एक Proof‑of‑Concept PoC शोषण शामिल है, जो lpar2rrd में पाया गया एक कमजोरी है। यह कमजोरी /lpar2rrd-cgi/upgrade.sh एंडपॉइंट का दुरुपयोग करके रिमोट कोड निष्पादन RCE और निर्देशिका भ्रमण की अनुमति देती है। शोषण कार्यप्रवाह इस...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 एक्सप्लॉइट शीर्षक : Cisco UCS Manager - 2.21d - Remote Command Execution विवरण : सिस्को FX-OS के 1.1.2 से पहले Firepower 9000 डिवाइसों पर और Cisco Unified Computing System UCS Manager के 2.24b से पहले, 2.25a से पहले 2.25, त...

CVE-2026-19971

A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication. The attack is only possible within the local network. The vendor was contacted early about this...

CVE-2026-9476

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command injection. The attack can be...

CVE-2026-9533

Technical details about CVE-2026-9533 are not publicly provided in the supplied documents; no affected firmware versions, root cause specifics, or mitigations are listed here. Monitor for updates.

CVE-2026-9475

Totolink A8000RU Web Management interface vulnerable in /cgi-bin/cstecgi.cgi (function setIpQosRules). CVE-2026-9475 affects Totolink A8000RU 7.1cu.643_b20200521; manipulating the Comment argument enables OS command injection. Remote exploitation is possible; exploit publicly disclosed. According...

EUVD-2026-31643

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. The affected element is the function setQosCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os command injection. Remote exploitation of...

CVE-2018-25358 D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi

D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the tablename parameter in POST requests. Attackers can send requests to /mycgi.cgi with tablename values like adminuser,...

CVE-2026-8227

CVE-2026-8227 affects Wavlink NU516U1 240425. The vulnerability is in the function wzdapMesh of the file /cgi-bin/adm.cgi, enabling an OS command injection. It may be exploited remotely, with exploits publicly available. Multiple sources (NVD, Red Hat, EUVD/ENISA, CIRCL, CVE records) corroborate ...

CVE-2026-7633

A vulnerability was identified in Totolink N300RH 6.1c.1353B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument FileName leads to file inclusion. The attack may be performed from remote. The exploit is publicly available and mig...

CVE-2026-7748

A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument FileName can lead to buffer overflow. The attack can be launched...

TOTOLINK N300RH 缓冲区错误漏洞

TOTOLINK N300RH is a long-range wireless router produced by TOTOLINK Corporation. The version TOTOLINK N300RH 3.2.4-B20220812 contains a buffer overflow vulnerability. This vulnerability stems from the function setWanConfig in the component POST Request Handler, specifically the...

CVE-2026-7243 Totolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injection

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. The affected element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument maxRtrAdvInterval leads to os command injection. It is possible to initiate the...