980 matches found
vsFTP-2.3.4-Remote-Root-Shell-Exploit
vsFTP 2.3.4 Remote Root Shell Exploit A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability CVE-2011-2523 present in vsFTP 2.3.4 Requirements Language Used = Python3 Modules/Packages used: socket os pexpect paramiko getpass datetime optparse...
oxasploits
oxasploits A number of exploits written by oxagast Most of these CVEs are accreddited to oxagast as well Contact: Marshall Whittaker [email protected] CVEs and PoC code CVE-2006-3392 Webmin =1.29 remote root exploit This exploit, lifts a Webmin cookie with a directory transversal and aritrar...
Webmin_1.890-POC
Webmin 1.890 expired Remote Root CVE-2019-15107 Webmin version 1.890 was released with a backdoor that could allow anyone with knowledge of it to execute commands as root. Versions 1.900 to 1.920 also contained a backdoor using similar code, but it was not exploitable in a default Webmin install...
CVE-2017-7494
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...
CVE-2026-126722
Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon /usr/bin/telnetdstartup that, upon receipt of a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, enables telnet service with default credentials, providing remote root access. Firmware...
EUVD-2026-123584
Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon /usr/bin/telnetdstartup that, upon receipt of a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, enables telnet service with default credentials, providing remote root access. Firmware...
CVE-2026-126722
The Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon located at /usr/bin/telnetd_startup . The vulnerability is triggered by sending a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, which enables a telnet service with default credentials, g...
CVE-2026-126722 CVE-2026-126722
Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon /usr/bin/telnetdstartup that, upon receipt of a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, enables telnet service with default credentials, providing remote root access. Firmware...
linux-tcp-uaf-cve-2026-98432
linux-tcp-uaf-cve-2026-98432 A response kit for CVE-2026-98432 , a memory-safety bug in the code the Linux kernel uses to set up TCP connections. It contains three things: Diagnostic script — tells you whether a server is vulnerable and how urgent it is. It makes no changes to the system. Tempora...
CVE-2026-24061---telnetd
CVE-2026-24061 – telnetd 🔥 Description CVE-2026-24061 is a critical vulnerability affecting certain implementations of telnetd , allowing an authentication bypass and the obtainment of a remote root shell without valid credentials. This repository provides a Proof of Concept PoC for detecting...
PT-2026-145282
Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon /usr/bin/telnetd startup that, upon receipt of a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, enables telnet service with default credentials, providing remote root access. Firmware 2026081...
CVE-2026-126722: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon (/usr/bin/telnetd_startup) that, upon…
Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon /usr/bin/telnetdstartup that, upon receipt of a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, enables telnet service with default credentials, providing remote root access. Firmware...
CVE-2026-24061-Telnetd
CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...
cve-2026-98432-mitigation
한국어 CVE-2026-98432 temporary mitigation This repository holds scripts that drop IPv4 TCP packets carrying IP options on a Linux host. On hosts without SELinux/Smack NetLabel CIPSO labeling, CVE-2026-98432 a Linux kernel IPv4 TCP use-after-free cannot trigger without such packets. It is a temporar...
cve-2026-98432
CVE-2026-98432 mitigation toolkit IPv4 TCP inetopt/ireqopt use-after-free upstream fix e3f33b0a, kfree → kfreercu in inetsockdestruct + tcpv4reqskdestructor. Trigger: client SYN carrying IPv4 options ihl 5 — without options the raced object ireqopt is never allocated. The claimed remote-root...
kernel98scan
Checks whether a Linux host may be exposed to CVE-2026-98432 , the use-after-free in the kernel's IPv4 TCP handshake. Part of shouldipanic.ch. A SYN carrying IPv4 options Record Route, Timestamp reaches code that reads the options after they may already have been freed. Any open IPv4 TCP port is...
Exploit for CVE-2026-98432
Checks whether a Linux host may be exposed to CVE-2026-98432...
Exploit for CVE-2026-98432
cve-2026-98432-check Read-only shell check for whether a Linu...