CVE-2022-46080

EN Este proyecto proporciona una prueba de concepto de exploit para una vulnerabilidad de ejecución remota de código RCE en routers Nexxt, específicamente dirigida a la versión 15.03.06.60. Esta vulnerabilidad permite a un atacante habilitar el servicio Telnet en el router sin autenticación,...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 PoC de ejecución remota de código en Cisco Catalyst Este repositorio contiene el código de prueba de concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

CVE-2026-7193

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...

CVE-2020-25749

CVE-2020-25749 Descripción sugerida El servicio Telnet de las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339 podría permitir que un atacante remoto tome el control completo del dispositivo con una cuenta de altos privilegios. La vulnerabilidad existe porque una cuenta...

CVE-2017-3881

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

CVE-2020-25747

CVE-2020-25747 Descripción sugerida El servicio Telnet de las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339 puede permitir a un atacante remoto obtener acceso a los servicios RTSP y ONVIF sin autenticación. Por lo tanto, el atacante puede ver transmisiones en vivo de...

CVE-2025-9090

CVE-2025-9090 Autor: Byte Reaper Descripción Este exploit apunta a CVE-2025-9090 , una vulnerabilidad de inyección de comandos en el router Tenda AC20 v16.03.08.12. El fallo se encuentra en el endpoint /goform/telnet, que puede activarse de forma remota. Al acceder, inicia el servicio Telnet en e...

chall2026-telneted

@Hack 2026: Telneted Escrito por Harsh. Categoría : Pwn Resueltos : 34/120 Etiquetas : beginner Protocolo : telnet El equipo de reconocimiento ha encontrado otro punto final en la red de los Alienígenas, pero parece que no podemos conectarnos a él con nuestras herramientas. Las capturas de red...

CVE-2026-51664: Improper Access Control

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-66405

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products...

CVE-2026-66405

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products...

EUVD-2026-54833

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configurati...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...

EUVD-2026-34274

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-35904: Improper Access Control

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-35904

The T3 Technology CPE models T625Pro v1.0.07 , T6825G v1.0.03 , and T7281 v1.0.03 are vulnerable to an incorrect access control flaw in the web management interface. An unauthenticated attacker can send a crafted request to a vulnerable CGI component to enable the Telnet service . While the vulne...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...