the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — жёстко заданный секрет JWT в MQTT-брокере Cudy WR3000 2.0 Mesh PoC-инструментарий для статьи Hunt-Benito "Один и тот же ключ открывает каждое устройство: CVE-2026-71960 — жёстко заданный секрет JWT в MQTT-брокере Cudy WR3000 Mesh"...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Ошибка Sudo позволяет ограниченным пользователям выполнять команды от root ДЕМОНСТРАЦИЯ УЯЗВИМОСТИ Добавьте нового пользователя: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // добавьте пароль для пользователя visudo Добавьте новую запись test...

CVE-2019-19268

CVE-2019-19268 Затронутая версия: rConfig 3.9.2. Описание Множество векторов атак в rConfig v3.9.2 из-за неправильной конфигурации, что позволяет локальным пользователям выполнять команды root через sudo. Обнаружившие dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 Email:...

CVE-2020-7247

CVE-2020-7247 Эта уязвимость существует в функции «smtpmailaddr» почтового сервера OpenSMTPD в OpenBSD и затрагивает версию OpenBSD 6.6. Она позволяет атакующему выполнять произвольные команды оболочки, например «sleep 66», от имени пользователя root Как использовать? python3 getShell.py Если вам...

CVE-2024-27130

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Мы требуем безопасного возвращения всех граждан, взятых в заложники террористической группировкой ХАМАС. Мы не успокоимся, пока каждый заложник не будет освобождён и не вернётся домой в безопасности. Вы можете помочь вернуть их...

Grandstream UCM6200 - SQL Injection

Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...

CVE-2024-57376

CVE-2024-57376 Эксплойт удалённого выполнения кода без аутентификации для D-Link DSR-250 и DSR-250N Бюллетень безопасности: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Использование $ python3 exploit.py usage: Пример $ python3 exploit.py 192.168.1.1 443 id +...

CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB formSystemCheck 핸들러에서 하드코딩된 인증 백도어를 통해 도달 가능한 인증되지 않은 원격 루트 명령 실행CWE-78 — OS 명령 주입. DAP-1360 RevB, 펌웨어 2.14B05 에서 검증됨. 근본 원인 두 가지 독립적인 문제가 연쇄됨: 1. 하드코딩된 인증 우회 경로. main httpd @ 0x4064c8에서: strcasecmprequestpath, "dEfWzDLOgIn" ; token @ 0x48046c ... sw 1,...

CVE-2023-51073

CVE-2023-51073 - Уязвимость проверки сервера обновления прошивки в Buffalo LS210D версии 1.78-0.03 Кристофер Дж. Пейс и Райан Миллер Buffalo LS210D — это сетевой накопитель NAS, разработанный и продаваемый для малого бизнеса и частных лиц. В LS210D есть возможность удаленной загрузки и установки...

CVE-2026-96515

CVE-2026-96515: Netlink HG323RW의 인증된 루트 명령 실행 인증된 제한된 웹 사용자는 Netlink HG323RW 진단 가져오기 핸들러를 통해 셸 스크립트를 업로드할 수 있으며, UID-0 BOA 프로세스가 이를 실행하게 할 수 있습니다. 인증과 유효한 verification/CSRF 값이 필요합니다. 이 저장소는 인증 전 코드 실행을 주장하지 않습니다. 취약점 기록 필드| 값 ---|--- CVE| CVE-2026-96515 제품| Netlink ICT HG323RW 라우터 영향받는 하드웨어| V3.7...

CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE IngressNightmare ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================ Target:...

CVE-2026-34990

CVE-2026-34990 설명 CVE-2026-34990 - OpenPrinting CUPS 2.4.16 및 이전 버전에서, 로컬의 비권한 사용자가 cupsd를 조종하여 공격자가 제어하는 localhost IPP 서비스에 재사용 가능한 Authorization: Local ... 토큰으로 인증하도록 만들 수 있습니다. 이 토큰만으로도 localhost에서 /admin/ 요청을 실행하기에 충분하며, 공격자는 CUPS-Create-Local-Printer와 printer-is-shared=true를 결합하여 일반적인...

CVE-2026-86131

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.2:CLSA-2026:1786675343)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786675343 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local...

CVE-2026-12269

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...

EUVD-2026-88209

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...

CVE-2026-101045 Fleet Homebrew Cask OS Command Injection via Metadata

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101045 Fleet Homebrew Cask OS Command Injection via Metadata

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101045

Fleet-maintained app install and uninstall scripts for macOS are vulnerable to OS command injection due to insufficient escaping of Homebrew cask metadata . In manifests generated before 2026-08-19 , certain interpolation sites failed to escape shell metacharacters (e.g., $(...)), allowing an att...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...