1051 matches found
CVE-2026-41940
CVE-2026-41940 – Обход аутентификации cPanel/WHM + смена пароля root Этот скрипт эксплуатирует уязвимость обхода аутентификации в cPanel/WHM CVE-2026-41940, используя технику CRLF-инъекции для подделки сессии администратора. После успешного взлома скрипт может изменить пароль пользователя root в...
CVE-2023-28432
CVE-2023-28432 утечка информации в MinIO — утечка учётных данных В системе MinIO существует уязвимость утечки информации. Неаутентифицированный удалённый атакующий может получить все чувствительные данные, отправив специальный POST-запрос на /minio/bootstrap/v1/verify, включая MINIOSECRETKEY и...
CVE-2026-41940
CVE-2026-41940 — Инструмент исследования обхода аутентификации WHM/cPanel Этот репозиторий содержит скрипт Proof-of-Concept PoC , основанный на цепочке обхода аутентификации cPanel/WHM через cookie whostmgrsession и HTTP-заголовки. После успешного проникновения скрипт изменяет пароль root и...
CVE-2024-25832-PoC
CVE-2024-25830 et CVE-2024-25832 - Contrôle d'accès inapproprié et téléchargement de fichier sans restriction sur DataCube3. Aperçu Ce dépôt contient une preuve de concept PoC pour une chaîne d'exploitation en deux étapes ciblant les dispositifs DataCube3. Il combine CVE-2024-25830 Contrôle d'acc...
CVE-2017-13872-Patch
CVE-2017-13872-Patch Téléchargez ce logiciel et exécutez-le, il vous demandera un nouveau mot de passe pour l'utilisateur root. Le mot de passe peut être différent, mais je pense que, par défaut, il est égal au mot de passe Admin. Mise à jour Vous pouvez corriger le bug en mettant à jour votre...
CVE-2022-0847
CVE-2022-0847 CVE-2022-0847의 익스플로잇으로, 루트 계정의 비밀번호를 직접 제거합니다. 사용법: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit 요구 사항: gcc 작동 요약: Max Kellermann의 전통적인 클래식 익스플로잇 POC는 루트 권한을 가진 사용자를 추가하는 데 사용되었지만, 이 POC 익스플로잇은 /etc/passwd 파일 root❌0:0:root:/root:/bin/bash을 수정하여 루트 계정의 비밀번호를 제거합니다. 코드 관련 세부 사항: 이에 ...
CVE-2026-22094 Weak root password in EVbee DC 80
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...
CVE-2026-22094 Weak root password in EVbee DC 80
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...
CVE-2026-22094
The firmware for the EVbee DC-80 contains a weak hardcoded root password . This vulnerability allows an attacker to gain root access by authenticating through the SSH daemon , which is exposed to the network. No specific remediation or exploit details are provided in the documents.
CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
UBUNTU-CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
CVE-2026-92761
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...
EUVD-2026-81029
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...
CVE-2026-66408
The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account...
CVE-2026-66408
CVE-2026-66408 affects the DEEBOT PRO M1 and DEEBOT PRO K1VAC: the root accounts are configured with weak passwords. A user with physical access can obtain the root password, enabling privileged action on the device. The CVSS metrics indicate a physical attack with low complexity, but high confid...
CVE-2026-49005
The root password hash of the device can be obtained through unencrypted information in the firmware...
CVE-2026-49005
The root password hash of the device can be obtained through unencrypted information in the firmware...