13 matches found
scan-cve-2026-24061
CVE-2026-24061 Scanner – GNU inetutils telnetd Auth Bypass ⚠️ AVISO LEGAL MUY IMPORTANTE ⚠️ Esta herramienta es exclusivamente para fines educativos, investigación de seguridad, análisis de vulnerabilidades y pruebas autorizadas. Cualquier uso no autorizado contra sistemas que no posees o para los...
CVE-2026-24061-telnet2root
Escáner y Exploit de Vulnerabilidad CVE-2026-24061 👨💻 Autor: Furkan KAYAPINAR @FurkanKAYAPINAR Descripción general Este repositorio contiene un escáner de vulnerabilidades y un exploit interactivo para CVE-2026-24061. Esta vulnerabilidad afecta a inetutils-telnetd y potencialmente a otras...
CVE-2026-24061
🚨 CVE-2026-24061 — “TelneTD” GNU Inetutils telnetd 中的严重远程身份验证绕过漏洞 2015 年的幽灵刚刚回来,占有了所有还在运行 telnet 的东西。 零身份验证。一个环境变量。即时 root shell。 ⚠️ 概述 CVE-2026-24061 是 GNU Inetutils telnetd ≤ 2.7 中的一个 严重远程权限提升 漏洞。 未经身份验证的远程攻击者通过 Telnet NEW-ENVIRON 选项将 USER 环境变量设置为 "-f root"。 telnetd 未经任何清理 直接将其传递给 /bin/login →...
CVE-2026-56740
JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...
PT-2026-60884
Name of the Vulnerable Software and Affected Versions JLine versions prior to 3.30.14 JLine versions prior to 4.0.16 JLine versions prior to 4.2.1 Description The JLine3 Telnet server remote-telnet module fails to limit the number of environment variables a client can inject using the Telnet...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 — Reproduction Lab ⚠️ For educational purp...
📄 GNU Inetutils 2.7 Telnet Authentication Bypass Scanner
GNU Inetutils version 2.7 telnet authentication bypass scanner that leverages a crafted USER value. This vulnerability is tracked as CVE-2026-24061 and is conceptually related to historical Telnet NEW-ENVIRON issues such as CVE-1999-0192, but affects modern GNU Inetutils implementations...
Exploit for CVE-2026-24061
CVE-2026-24061 Vulnerability Scanner & Exploit !Licenseh...
Exploit for CVE-2026-24061
CVE-2026-24061 GNU Inetutils telnetd Remote Authentication...
Exploit for CVE-2026-24061
CVE-2026-24061 GNU Inetutils telnetd Remote Authentication...
security flaw
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...
CVE-2005-0488
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...
CVE-2005-1205
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...