CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Overview This repository contains a Proof‑of‑Concept exploit for GNU Inetutils telnetd remote authentication bypass vulnerability. The issue arises because telnetd improperly sanitizes the USER environment variable received via Telnet NEW‑ENVIRON negotiation before invoking /bin/login. By...

scan-cve-2026-24061

CVE-2026-24061 스캐너 – GNU inetutils telnetd 인증 우회 ⚠️ 매우 중요한 법적 고지 ⚠️ 이 도구는 교육 목적, 보안 연구, 취약점 분석 및 승인된 테스트 전용 입니다. 귀하가 소유하지 않았거나 서면으로 명시적 허가를 받지 않은 시스템에 대한 비승인 사용은 범죄 입니다 브라질: 형법 제154-A조 + Lei 14.155/2021, 그 외 국제 법률 포함. 반드시 본인 소유 환경, 통제된 실험실, 또는 서명된 RoERules of Engagement 가 있는 펜테스트/레드팀 환경에서만 사용하십시오...

CVE-2026-24061

-c0392b?style=flat GNU InetUtils telnetd - Unauthenticated Remote Root via NEW-ENVIRON Variable Injection Overview - Technical Analysis - Affected Versions - Usage - Remediation - References Vulnerability Overview CVE-2026-24061 is a critical authentication bypass vulnerability in the telnetd...

CVE-2026-24061-telnet2root

CVE-2026-24061 Vulnerability Scanner & Exploit 👨‍💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR Overview This repository contains a vulnerability scanner and an interactive exploit for CVE-2026-24061. This vulnerability affects inetutils-telnetd and potentially other Telnet implementations through...

TelnetdBypass-

TelnetdBypass — CVE-2026-24061 Scanner A Python-based security scanner that detects and exploits CVE-2026-24061 , a critical CVSS 9.8 authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. How it Works The scanner injects a malicious USER=-f root value via the...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

CVE-2026-24061

Docker Telnet Auto-Login Lab A lightweight Docker lab for experimenting with Telnet protocol negotiation , explained in the CVE-2026-24061 exploit, which contains automatic username injection using the NEW-ENVIRON option. This project creates an isolated client–server environment to study how...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd 원격 인증 우회 진심으로, 2026년에 telnet? 여러분, 이제 그만 넘어갈 때입니다. SSH는 1995년부터 존재했습니다. 🤦 설명 GNU Inetutils telnetd의 치명적인 인증 우회 취약점으로, 버전 1.9.3부터 2.7까지 영향을 받습니다. 이 취약점은 NEW-ENVIRON telnet 옵션을 악용하여 login1에 악의적인 인자를 주입합니다. 공격자는 telnet 프로토콜을 통해 USER=-f root를 설정하여 인증을 우회하고 자격 증명 없...

CVE-2024-20931

CVE-2024-20931 The Poc for CVE-2024-20931 Vulnerability Analysis A New Attack Surface for JNDI Injection - CVE-2024-20931 Analysis...

CVE-2026-24061

CVE-2026-24061 Telnet NEW-ENVIRON 인증 우회 취약점 PoC. 빌드 Windows MinGW: root@kitploit: gcc -o exploit.exe exploit.c -lws232 Linux: root@kitploit: gcc -o exploit exploit.c -lpthread 사용법 root@kitploit: ./exploit port 예시 root@kitploit: ./exploit 192.168.1.1 23 면책 조항 승인된 보안 테스트에만 사용하십시오...

telnetd_CVE-2026-24061_tester

Telnetd CVE-2026-24061 Test Script A Python security testing tool to detect vulnerability to environment variable injection in telnetd servers via the NEW-ENVIRON telnet option. Overview This script tests telnetd servers for CVE-2026-24061 , a vulnerability that allows attackers to inject...

Malicious code in open-item-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba5b55d57f4938bf2494d369d14434bb80ba6f6c712c7f8d89ae773c27dc457 On require, index.js spawns a detached, unref'd background Node process lib/check-items.js that repeatedly HTTP-GETs a JSON payload from...

CVE-2024-33209

CVE-2024-33209 FlatPress 1.3. es vulnerable a Cross Site Scripting XSS. Un atacante puede inyectar código JavaScript malicioso en la sección "Agregar nueva entrada", lo que le permite ejecutar código arbitrario en el contexto del navegador web de la víctima. Tipo de vulnerabilidad: Cross Site...

CVE-2026-62744

creationtimestamp| type| source ---|---|--- 2026-09-08 17:59:54+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117236720846334726 2026-09-08 19:56:56+00:00| seen| https://bsky.app/profile/thecircuitry.to/post/3muzslkgmy22i 2026-09-08 22:03:35+00:00| seen|...

CVE-2026-81790

creationtimestamp| type| source ---|---|--- 2026-09-08 09:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muynwy3nox23...

CVE-2026-47172

creationtimestamp| type| source ---|---|--- 2026-09-07 22:00:04+00:00| seen| Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlaoY9G7E0 2026-09-08 00:00:10+00:00| published-proof-of-concept| Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlaoY9G7E0...

CVE-2020-36188

Descripción FasterXML jackson-databind 2.x antes de 2.9.10.8 maneja incorrectamente la interacción entre gadgets de serialización y tipado, relacionado con com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource Cómo RCE pom.xml root@kitploit: com.fasterxml.jackson.core jackson-databi...

CVE-2026-86452

creationtimestamp| type| source ---|---|--- 2026-09-07 13:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ji3cndbjq65jp 2026-09-12 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdoctjdhs24...

CVE-2026-86451

creationtimestamp| type| source ---|---|--- 2026-09-07 13:35:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccxurbhumciz6...

CVE-2026-56740

A flaw was found in the JLine3 Telnet server remote-telnet module. An unauthenticated remote attacker can exploit this vulnerability by injecting an excessive number of environment variables through the Telnet NEW-ENVIRON option. This action causes the server to store numerous variable pairs,...