CVE-2025-43919

CVE-2025-43919: Directory Traversal in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43919 Severity: 5.8 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Attack Type: Remote Affected Software: GNU Mailman...

CVE-2025-43921

CVE-2025-43921: Unauthenticated Mailing List Creation in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43921 Severity: 5.3 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Attack Type: Remote Affected Softwar...

libextractor-privesc

CVE-2026-100310: GNU libextractor Privilege Escalation via LIBEXTRACTORPREFIX Summary GNU libextractor's plugin loading mechanism uses the LIBEXTRACTORPREFIX environment variable to determine where to load shared libraries .so plugins from. Because it uses getenv instead of securegetenv, this...

CVE-2026-24061-payload

CVE-2026-24061 - Bypass de Autenticación por Inyección de Argumentos en telnetd de GNU InetUtils Las versiones 1.9.3 a 2.7 de GNU InetUtils son vulnerables a un bypass de autenticación remota en el servidor telnetd. El demonio telnetd no sanea adecuadamente la variable de entorno USER antes de...

[SECURITY] Fedora 45 Update: lash-0.5.4-60.fc45

LASH is a session management system for JACK and ALSA audio applications on GNU/Linux. It allows you to save and restore audio sessions consisting of multiple interconneced applications, restoring program state i.e. loaded patches and the connections between them...

[SECURITY] Fedora 45 Update: gcc-16.2.1-2.fc45.1

The gcc package contains the GNU Compiler Collection version 16. You'll need this package in order to compile C code...

[SECURITY] Fedora 45 Update: emacs-31.1-5.fc45

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor...

bash-4.3-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.3. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

CVE-2026-24061

🔒 CVE-2026-24061 - Exploit Critical Authentication Flaw 🚀 Getting Started Welcome to the CVE-2026-24061 project. This application demonstrates a critical security flaw. It allows attackers to bypass authentication in GNU inetutils-telnetd. This README will guide you through downloading and runnin...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

frida-fuzzer

Fuzzer de API de Frida v1.4 Derechos de autor C 2020 Andrea Fioraldi [email protected] Publicado bajo la Licencia Apache v2.0 Este fuzzer experimental está diseñado para fuzzing de API en memoria. El diseño está altamente inspirado y basado en AFL/AFL++. Por el momento, el mutador es bastant...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

nexphisher

Project not maintained anymore. UseZPhisher Installation : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher SETUP : bash setup SETUP TERMUX : bash tmuxsetup Run : bash nexphisher Single Command : apt update ; apt install git -y ; git clone...

POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal Vulnerability 📝 Description PoC for CVE-2025-69194 , a critical Path Traversal vulnerability in GNU Wget2 = 2.2.0 verified on v1.99.1. This vulnerability allows attackers to achieve arbitrary file write or overwrite on the victim's filesystem by providing ...

libextractor-ole2-rce

CVE-2026-91752: GNU libextractor Stack Overflow via OLE2 Summary A stack-based buffer overflow in GNU libextractor's OLE2 plugin allows remote denial of service crash and code execution when processing a crafted .doc file. The vulnerability is in processstaroffice ole2extractor.c:349 which...

CyberhawksLab-telnetCVE

CyberHawks lab demo finding report Credit to: @SafeBreach-Labs CVE: CVE-2026-24061 Lab: Cyberhawks Lab Target: 10.1.1.1 demo.cyberhawks.lab Finding ID: WU-08 Date: 2026-09-08 Severity: Critical Status: Confirmed / Exploited Executive Summary During an assessment of the Cyberhawks lab environment,...

CVE-2026-24061

Bypass de Autenticación por Inyección de Argumentos en GNU InetUtils telnetd CVE-2026-24061 En enero de 2026, se descubrió que el servicio GNU telnetd de GNU InetUtils era vulnerable a un bypass de autenticación porKyu Neushwaistein alias Carlos Cortes Alvarez. Registrada como CVE-2026-24061, est...

Terrminus-CVE-2026-2406

Terminus - Escáner y Marco de Explotación CVE-2026-24061 Un motor de análisis de seguridad para la vulnerabilidad de omisión de autenticación y escalada de privilegios Telnet NEWENVIRON CVE-2026-24061. Resumen Terminus es una herramienta profesional de investigación de seguridad diseñada para...

CVE-2021-3279

CVE-2021-3279 https://www.cvedetails.com/cve/CVE-2021-3279/...

CVE-2026-24061

CVE-2026-24061 - omisión de autenticación en telnetd de qué se trata Inyección de argumentos en telnetd de GNU InetUtils. Versiones 1.9.3 a 2.7. CVSS 9.8. En CISA KEV desde el 26.01.2026, es decir, explotado activamente en la naturaleza. Todo el truco consiste en que telnetd toma el valor de la...