155 matches found
CVE-2017-17562
CVE-2017-17562 RCE en servidor web GoAhead 2.5 3.6.5 Exploit independiente de reverse shell en Python 3 para CVE-2017-17562, funciona en versiones del servidor web GoAhead 2.5 3.6.5. Blog artículo aquí. Escrito y probado en Python 3.7 basado en POC y entorno vulnerable aquí. Parte del código toma...
CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit
CVE-2019-5096 Exploit de DoS por Use After Free root@kitploit: python TriggerDOS.py ip Análisis de la vulnerabilidad https://github.com/embedthis/goahead.git Enlace de GitHub de GoAhead git diff del parche Análisis del código clave En el código, localizamos upload.c:370; se puede ver que antes de...
go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset
CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflow PoC Companion PoC for the Hunt-Benito article "GO Without Bounds: CVE-2026-67822 — Stack Overflow in Tenda W6-S'swifiSSIDset Form Handler". CVE-2026-67822 CVSS 9.8 Critical, CWE-121 is a stack-based buffer overflow in formwrlSSIDset, t...
goahead-rce-exploit
GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/handler set payload generic/shellbindtcp msf6 exploitmulti/handler set LPORT=1337 msf6 exploitmulti/handler set RHOST=192.168.1.200 msf6 exploitmulti/handler run Started bind TCP handler against 192.168.1.200:1337...
Tenda-W20E-Vulnerability-Disclosure
Tenda W20E V5.0 Vulnerability Disclosure Security research di...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
EUVD-2026-27327
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356: Improper Neutralization of Special Elements used in an OS Command
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
MeiG FORGE_SLT711 操作系统命令注入漏洞
MeiG FORGESLT711 is an industrial-grade wireless communication module developed by MeiG Corporation. MeiG FORGESLT711 has a vulnerability related to operating system command injection. This vulnerability stems from issues with the /action/SetRemoteAccessCfg endpoint in the GoAhead Web server, whi...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
CVE-2026-36356
The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...
Exploit for CVE-2026-36356
CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Unauthentica...
From Log4j to IIS, China's Hackers Turn Legacy Bugs into Global Espionage Tools
A China-linked threat actor has been attributed to a cyber attack targeting an U.S. non-profit organization with an aim to establish long-term persistence, as part of broader activity aimed at U.S. entities that are linked to or involved in policy issues. The organization, according to a report...
EUVD-2007-6666
Malware in sbrugna...
EUVD-2019-6312
Malware in sbrugna...