CVE-2022-39066

CVE-2022-39066 Détails du firmware : root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prérequis requests pip install requests Injection SQL La vulnérabilité est une injection SQL présente dans le gestionnaire PHONEBLOCKADD du serveur web binaire...

CVE-2017-17562

CVE-2017-17562 RCE serveur web GoAhead 2.5 3.6.5 Exploit standalone en Python 3 de reverse shell pour CVE-2017-17562, fonctionne sur les versions 2.5 3.6.5 du serveur web GoAhead. Article de blog ici. Écrit et testé sur Python 3.7 basé sur POC et environnement vulnérable ici. Du code emprunté au...

CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit

CVE-2019-5096: Эксплуатация Use-After-Free для DoS root@kitploit: python TriggerDOS.py ip Анализ уязвимости https://github.com/embedthis/goahead.git GoAhead githublink git diff патча Анализ ключевого кода В коде находим upload.c:370, видим, что перед root@kitploit: wp-currentFile=0 выполняется...

goahead-rce-exploit

GoAhead 웹 서버 2.5 use multi/handler msf6 exploitmulti/handler set payload generic/shellbindtcp msf6 exploitmulti/handler set LPORT=1337 msf6 exploitmulti/handler set RHOST=192.168.1.200 msf6 exploitmulti/handler run Started bind TCP handler against 192.168.1.200:1337 그런 다음 다른 셸에서 이 익스플로잇을 실행하여 리스너...

Goahead-CVE-2017-17562

Goahead-CVE-2017-17562...

goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

Goahead веб-сервер до версии 5.1.5 RCE PoC CVE-2021-42342 Недавняя ошибка в Goahead Webserver была обнаружена William Bowling, которая приводит к RCE на эксплуатируемом сервере. Проблема существует в версиях до 5.1.5, которая, согласно Shodan, охватывает около 2,8 млн серверов в интернете. CVS...

Embedthis GoAhead <3.6.5 - Remote Code Execution

description: Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. id: CVE-2017-17562 info: name: Embedthis GoAhead 3.6.5 - Remote Code Execution author: geeknik severity: high description: | description: Embedthis GoAhead before...

CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — 認証不要のOSコマンドインジェクション /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 発見者 : Daniil Gordeev 公開日 : 2026-05-03 概要 MeiG Smart FORGESLT711 4G LTE CPE デバイスに同梱されている GoAhead Webサーバーは、認証なしでアクセス可能なHTTPエンドポイント /action/SetRemoteAccessCfg...

CVE-2021-43469

CVE-2021-43469 Название эксплойта: Слабые пароли и уязвимости фонового выполнения команд в маршрутизаторе VINGA Продукт: VINGA WR-N300U Веб-сервер: goahead Автор: CXAQHQ Дата: 2021-11-01 После входа в систему в интерфейсах Ping и traceroute существуют уязвимости выполнения команд. Выполните коман...

CamOver

CamOver CamOver est un outil d'exploitation de caméras qui permet de divulguer le mot de passe administrateur d'une caméra réseau. Fonctionnalités Exploite les vulnérabilités des modèles de caméras les plus populaires tels que CCTV, GoAhead et Netwave. Optimisé pour exploiter plusieurs caméras à ...

CVE-2022-39073

CVE-2022-39073 Détails du firmware : root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prérequis requests pip install requests Injection de commande La vulnérabilité est une injection de commande partagée entre le binaire ztenetlinkdetect et le...

VulnCheck KEV: CVE-2026-36356

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...

CVE-2026-36356

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...

EUVD-2026-27327

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...

CVE-2026-36356

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...

CVE-2026-36356

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...

CVE-2026-36356

CVE-2026-36356 concerns the GoAhead web server bundled with MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1). Affected component: the /action/SetRemoteAccessCfg endpoint in the embedded web interface. Root cause: unauthenticated access allows inputs to be interpolated in...

MeiG FORGE_SLT711 操作系统命令注入漏洞

MeiG FORGESLT711 is an industrial-grade wireless communication module developed by MeiG Corporation. MeiG FORGESLT711 has a vulnerability related to operating system command injection. This vulnerability stems from issues with the /action/SetRemoteAccessCfg endpoint in the GoAhead Web server, whi...

CVE-2026-36356

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...

CVE-2026-36356

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...