ShuckNT

🔐 ShuckNT : Shuck hash before trying to crack it | Shuck.sh's script ShuckNT is the script of Shuck.sh online service for on-premise use try it online!. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard DES. Algorithms / formats supported ...

chapcrack

chapcrack A tool for parsing and decrypting MS-CHAPv2 network handshakes. 1. The first thing you'll need to do is obtain the network traffic for the MS-CHAPv2 handshake you'd like to crack. For PPTP VPN connections, simply use a tool such as tcpdump or wireshark in order to obtain a network...

Homework-of-Python

Homework-of-Python Python codes of my blog. pptppasswordhack.py Use Brute-force attack to get the password of PPTP VPN. It'll read the passwords in filenamed wordlist and then use pptpsetup to connect to the server. The time interval is 10 seconds. portscan.py Use to scan port. The timeout is 3...

CVE-2022-23270-PPTP

CVE-2022-23270 A package to detect CVE-2022-23270, a vulnerability in Microsoft's PPTP implementation. Example You can run this logic on the included PCAP in the testing\traces directory: $ zeek -Cr CVE-2022-23270-exploited.pcap packages $ cat notice.log separator \x09 setseparator , emptyfield...

CVE-2018-14847

CVE-2018-14847 create global proxy based on RouterOS via CVE-2018-14847 How To Use prepare pip3 install paramiko ipcalc optparse hashlib usage for ip file python3 loop.py -f list.txt for single ip python3 loop.py ip Copyright the poc part in this repository that use CVE-2018-14187 to get...

Oray Pugongying X5 Pro permission and access control issue vulnerability

The Oray Pugongying X5 Pro version 7.6.1 contains a security vulnerability. This vulnerability stems from improper handling of the pppdoptions parameter in the plugininit function within the /tmp/uploadfiles file in the PPTP/E WAN Setting Handler component. As a result, unrestricted file uploads...

CLSA-2026-1772815097 Fix of 104 CVEs

CVE-2025-38699 - scsi: bfa: Double-free fix CVE-2025-38699 CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG CVE-2025-38697 CVE-2025-39823 - KVM: x86: use arrayindexnospec with indices that come from guest CVE-2025-39823 CVE-2025-39689 - ftrace: Also allocate and copy hash for...

CLSA-2026-1771077729 kernel: Fix of 108 CVEs

net/ieee802154: don't warn zero-sized rawsendmsg CVE-2022-50706 - bpf: Don't redirect packets with invalid pktlen CVE-2022-49975 - media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat CVE-2025-38680 - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network...

EUVD-2026-80043

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...

CVE-2026-76871

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...

CVE-2026-76871 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...

CVE-2026-76871

Netcore NR255-V router, version 1.5.130703 , is affected by a sensitive information disclosure vulnerability spanning four components: mod_vpn_remote/plan.json , pptpd_user_show.cgi , pptp_client_config_show.cgi , and l2tpd_user_show.cgi . An attacker with low privileges over the network can leve...

PT-2026-93205

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703 Description Sensitive information disclosure occurs through VPN read handlers. Attackers can exploit the endpoints 'mod vpn remote/plan.json', 'pptpd user show.cgi', 'pptp client config show.cgi', and 'l2tpd...

CVE-2026-19341

CVE-2026-19341 affects UTT HiPER 1200GW (up to version 2.5.3-170306). The vulnerability targets the strcpy usage in /goform/pptpSrvGlobalConfig, where manipulation of the EncryptionMode argument causes a stack-based buffer overflow. This can be triggered remotely and is publicly disclosed; exploi...

CVE-2026-13515 Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow

A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclos...

CVE-2026-12807

A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the file /goform/setWAN of the component POST Request Handler. The manipulation of the argument pppUserName/pptpUserName/L2TPUserName results in command injection. It is possible to launch the attack...

CVE-2026-9428

A vulnerability has been found in Tenda F1202 1.2.0.20408. Affected is the function fromPPTPUserSetting of the file /goform/PPTPUserSetting. Such manipulation of the argument delno leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the...

CVE-2026-9628

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/username/password/tunnel name causes stack-based buffer...

Tenda F1202 Router Code Execution

The vulnerability of the fromPptpUserAdd function in the Tenda F1202 router microprogramming system is related to the operation that goes beyond the buffer boundaries in memory when processing the parameters username and opttype. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2026-9628

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/username/password/tunnel name causes stack-based buffer...