PoC-CVE-2017-3881

PoC-CVE-2017-3881 PoC de ejecución remota de código en Cisco Catalyst Este repositorio contiene el código de prueba de concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

CVE-2020-25749

CVE-2020-25749 Descripción sugerida El servicio Telnet de las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339 podría permitir que un atacante remoto tome el control completo del dispositivo con una cuenta de altos privilegios. La vulnerabilidad existe porque una cuenta...

CVE-2022-46080

EN Este proyecto proporciona una prueba de concepto de exploit para una vulnerabilidad de ejecución remota de código RCE en routers Nexxt, específicamente dirigida a la versión 15.03.06.60. Esta vulnerabilidad permite a un atacante habilitar el servicio Telnet en el router sin autenticación,...

CVE-2020-25747

CVE-2020-25747 Descripción sugerida El servicio Telnet de las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339 puede permitir a un atacante remoto obtener acceso a los servicios RTSP y ONVIF sin autenticación. Por lo tanto, el atacante puede ver transmisiones en vivo de...

CVE-2017-3881

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

CVE-2025-9090

CVE-2025-9090 作者：Byte Reaper 描述 此漏洞利用程序针对 CVE-2025-9090 ，这是 Tenda AC20 v16.03.08.12 路由器中的一个命令注入漏洞。 该漏洞位于端点 /goform/telnet，可远程触发。 访问该端点后，会启动设备上的 Telnet 服务，开放端口 23/2323 用于远程交互。 程序向该易受攻击的端点发送请求，查找响应字符串 "load telnetd success" ，然后尝试连接 Telnet 服务以确认利用成功。 构建 使用 gcc 编译： root@kitploit: gcc exploit.c...

chall2026-telneted

@Hack 2026: Telneted Escrito por Harsh. Categoría : Pwn Resueltos : 34/120 Etiquetas : beginner Protocolo : telnet El equipo de reconocimiento ha encontrado otro punto final en la red de los Alienígenas, pero parece que no podemos conectarnos a él con nuestras herramientas. Las capturas de red...

CVE-2026-66405

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products...

EUVD-2026-54833

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the SSH configurati...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...

EUVD-2026-34274

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-35904

CVE-2026-35904 affects T3 Technology CPE models: T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03. The issue is incorrect access control in the device web management CGI component, allowing unauthenticated attackers to enable Telnet via a crafted request. Public exploit/poC exists (GitHub advis...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...

CVE-2026-42376 D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-6989

A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2026-6989

A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...