CVE-2025-26466

CVE-2025-26466 poc for CVE-2025-26466 made by Fikret Can Gurbuz USAGE python3 poc.py -i -p These are the steps: 1. TCP connect to port 2. recieve server banner SSH-2.0-OpenSSHX.Xp1 3. send your client banner SSH-2.0-YourClient\r\n 4. send wrapsshpacketbuildkexinit 5. recieve server's KEXINIT...

DrayTek-Exploit

CVE-2022-23093 FreeBSD Stack-Based Overflow Informations ⚠️ The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting ⚠️ Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway,...

CVE-2025-25705

CVE-2025-25705 Description Item: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code Execution...

CVE-2025-25706

CVE-2025-25706 Description Item: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code Execution...

CVE-2023-38829-NETIS-WF2409E

CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS Router WF2409E Command Injection PoC Vulnerability Description: The ping and traceroute functions of the NETIS SYSTEMS Router WF2409E version V3.6.42541 are susceptible to command injection attacks. Malicious input can be crafted in the parameters of the...

CVE-2021-43469

CVE-2021-43469 Exploit Title: VINGA router has weak passwords and background command execution vulnerabilities. product: VINGA WR-N300U webserver: goahead Author: CXAQHQ TIME: 2021-11-01 Command execution vulnerabilities exist on the Ping and traceroute interfaces after login. Run the IP addr...

CVE-2023-35078

CVE-2023-35078 This script ethically checks for the presence of cve-2023-35078 via requesting the /ping endpoint from the Ivanti EPMM API. /ping simply responds with the VSP version, rather than attemping to pull device or admin data. Usage: ./CVE-2023-35078 This script assumes https connections...

CVE-2022-23093

CVE-2022-23093 FreeBSD Stack-Based Overflow Informations The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway, is...

CVE-2024-46658

CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Command Injection Vulnerability Usage 1- Edit the URL in the script. 2- Edit the CookieLogin value in the script. 3- Run the script, it will allow you to executing commands. Vulnerability Details GET...

CVE-2026-126355

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can...

openmeetings-nettest-ping-dos

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-nettest-ping-dos Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-nettest-ping-dos Class: DoS leftover Reach: Remote Apache OpenMeetings 9.1.0. Leftover of...

CVE-2026-126355: honojs hono: Hono is a Web application framework that provides support for any JavaScript runtime

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can...

GHSA-46WX-V44X-9HH2 Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)

Summary csrf validates a request only when its Content-Type is one of the three types an HTML form can send. Chromium's hyperlink auditing sends a cross-origin POST with the user's cookies and the content type text/ping, which is not in that list. The middleware does not look at Origin or...

Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)

Summary csrf validates a request only when its Content-Type is one of the three types an HTML form can send. Chromium's hyperlink auditing sends a cross-origin POST with the user's cookies and the content type text/ping, which is not in that list. The middleware does not look at Origin or...

npm: Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)

npm: Hono: csrf does not check requests sent by hyperlink auditing text/ping vulnerability discovered by ? in WordPress npm hono versions 4.13.16...

CVE-2025-52357

CVE-2025-52357 : Security Advisory: XSS in FD602GW-DX-R410 Router Admin Console Proof of Concept and Security Advisory for Reflected XSS vulnerability in the FD602GW-DX-R410 fiber router’s admin console firmware V2.2.14. Includes details, impact, and mitigation guidance. Overview A Cross-Site...

CVE-2026-126355

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can...

CVE-2026-126355 Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can...

CVE-2026-126355 Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can...

EUVD-2026-124735

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can...