CVE-2026-24061

CVE-2026-24061 Telnet RCE エクスプロイト - SafeBreach Labs 作 このスクリプトは、不正な USER 環境変数を使用して Telnet サーバー内の CVE-2026-24061 の脆弱性を悪用します。 使用方法 ターゲットホストを指定してスクリプトを実行します: root@kitploit: python telnetrce.py -p 引数 host: ターゲットの IP アドレスまたはホスト名 必須 -p, --port: ターゲットのポート デフォルト: 23 例 root@kitploit: python telnetrce.py...

Kangaroo

Kangaroo 一款可绕过运行 2.7 或更低版本的 telnet 服务器身份验证的漏洞利用工具。 又名 cve-2026-32746 如何防范此攻击 禁用 Telnet：如果不需要，请立即停止并关闭服务器和网络设备上的 telnetd 守护进程。封锁端口 23：使用防火墙或网络规则阻止所有对 TCP 端口 23 的外部访问，使互联网上的用户无法访问该服务。更新软件：查看系统供应商或 GNU Inetutils 的更新，以获取包含该漏洞修复的 2.7 以上版本。改用 SSH：用安全外壳（Secure Shell，ssh）替代 Telnet，它对连接进行加密，并且对远程管理来说安全得多。...

root-my-webos-tv

私のwebOS TVをroot化 脆弱なwebOSデバイス上でrootとしてtelnetサーバーを起動するシンプルなPythonスクリプトです。 動作確認済みテレビ webOS 4.9.7 - 5.30.40 モデル LG43UM7000PLA webOS 5.5.0 - 04.50.51 モデル OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 モデル OLED48C1PUB webOS 7.3.1-43 mullet-mebin - 03.33.85 モデル OLED55A23LA インストール 1. Python 3を...

telnet-iot-honeypot

免責事項 このプロジェクトはもうサポートも開発もされていません。Python2に基づいており、2020年にEOLに達し、時間とともにインストールが困難になる依存関係を使用しています。自己責任で使用してください！ Telnet IoT ハニーポット 'ボットネットのバイナリを捕獲するためのPython telnetハニーポット' このプロジェクトは、インターネット上のtelnetサーバーで恐ろしく安全でないデフォルトパスワードを介して拡散するIoTマルウェアのハニーポットとして機能するPython telnetサーバーを実装しています。 ハニーポットは、Cowrie...

CVE-2026-56740

A flaw was found in the JLine3 Telnet server remote-telnet module. An unauthenticated remote attacker can exploit this vulnerability by injecting an excessive number of environment variables through the Telnet NEW-ENVIRON option. This action causes the server to store numerous variable pairs,...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Host Servers

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17223, CVE-2026-17206, CVE-2026-17208, CVE-2026-16929, CVE-2026-17004, CVE-2026-18846, CVE-2026-17197, CVE-2026-17217, CVE-2026-17199, CVE-2026-17229, CVE-2026-16982 in host servers, and a buffer overflow CVE-2026-17220 in host,...

Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App

Overview Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc. web server for debugging purposes remains enabled CWE-489 - CVE-2026-66403 Missing serv...

Linux Distros Unpatched Vulnerability : CVE-2026-56740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number...

Linux Distros Unpatched Vulnerability : CVE-2026-56741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper...

DEBIAN-CVE-2026-56741

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

DEBIAN-CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

AZL-92453 CVE-2026-56741 affecting package jline 2.14.6-1

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine3 Telnet server remote-telnet module in JLine prior to versions 3.30.14, 4.0.16, and 4.2.1 does not limit the number of environment variables injected via Telnet NEW-ENVIRON. TelnetIO.readNEVariables() stores each variable pair in a HashMap within ConnectionData (lines 1127-1180), allowing a...

CVE-2026-56741 JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

Summary The JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option. An unauthenticated attacker can flood the server with a large number of unique variable pairs before sending the terminating IAC SE byte,...

GHSA-2R2C-CX56-8933 JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

Summary The JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS Negotiate About Window Size option. An unauthenticated remote attacker can send a NAWS subnegotiation advertising a 65535×65535 terminal and repeatedly alternate...

PT-2026-60884

Name of the Vulnerable Software and Affected Versions JLine versions prior to 3.30.14 JLine versions prior to 4.0.16 JLine versions prior to 4.2.1 Description The JLine3 Telnet server remote-telnet module fails to limit the number of environment variables a client can inject using the Telnet...