provisioner

Provisioner Resumen Provisioner es un asistente de aprovisionamiento orientado a desarrolladores para ordenadores de placa única SBCs, particularmente plataformas basadas en U-Boot. Proporciona un entorno autocontenido para: Acceder a placas de forma remota Automatizar flujos de trabajo de puesta...

iCULeak.py

iCULeak.py Herramienta para encontrar y extraer credenciales de archivos de configuración de teléfonos en entornos gestionados por CUCM Call Manager de Cisco. Cuando se utiliza CUCM Call Manager de Cisco, los archivos de configuración de los teléfonos se almacenan en un servidor TFTP. Estos...

CVE-2023-33669

CVE-2023-33669 Exploit Exploit para una vulnerabilidad de desbordamiento de pila en el router Tenda AC8, específicamente dirigido a la versión de firmware USAC8V4.0siV16.03.34.06. Página oficial del producto. Emulación Puedes colocar el archivo 'prepare.sh' en el directorio raíz del firmware y...

dotdotpwn

DESCRIPCIÓN DotDotPwn - El Fuzzer de Directory Traversal Es un fuzzer inteligente muy flexible para descubrir vulnerabilidades de directory traversal en software como servidores HTTP/FTP/TFTP, plataformas web como CMSs, ERPs, Blogs, etc. Además, tiene un módulo independiente del protocolo para...

dotdotpwn

DESCRIPTION DotDotPwn - The Directory Traversal Fuzzer It's a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc. Also, it has a protocol-independent module to send the desired...

TFTPlunder

TFTPlunder: un exploit para CVE-2023-29930 Este es un script de exploit para una vulnerabilidad de lectura/escritura ciega de archivos en el servidor de aprovisionamiento TFTP de Genesys anteriormente InIn. Información sobre la vulnerabilidad Esta vulnerabilidad se debe a opciones de configuració...

CVE-2006-6184

CVE-2006-6184 Este es un exploit independiente basado en Python para CVE-2006-6184. Este exploit desencadena un desbordamiento de búfer basado en pila en Allied Telesyn TFTP Server AT-TFTP 1.9, y posiblemente versiones anteriores, lo que permite a atacantes remotos provocar una denegación de...

cve-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...

DSL-2750U-Full-chain

firmware-analysis 1. Errores de DSL-2750U : mala configuración del servidor tftp CVE-2021-3707 error de inyección de comandos CVE-2021-3708...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack CVE-2020-25478 - ASUS RT-AC87U TFTP is vulnerable to Denial of ServiceDoS attack 1. NAME OF AFFECTED PRODUCTS AND VERSIONS ASUS RT-AC87U 3.0.0.4.38251640 2. PROBLEM TYPE Its primarily related to CWE-20, TFTP service running in ASUS...

Astra Linux – Vulnerability in libslirp

An invalid pointer initialization issue was discovered in the SLiRP networking implementation of QEMU. The flaw resides in the tftpinput function and can occur when processing an UDP packet that is smaller than the size of the ‘tftpt’ structure. This issue may lead to out-of-bounds read access or...

Astra Linux – Vulnerability in libssh

In libssh 0.9.4, there is a NULL pointer dereferencing in tftpserver.c if sshbuffernew returns NULL...

Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-68820...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62893

CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

TFTP Fetch, Linux dup2 Command Shell, Reverse TCP Stager

Fetch and execute an RISC-V 64-bit payload from a TFTP server. dup2 socket in s1, then execve. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule includ...

OESA-2026-2704 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Relative Path Traversal, Improper Isolation or...

OESA-2026-2705 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Relative Path Traversal, Improper Isolation or...