PT-2026-61669

Name of the Vulnerable Software and Affected Versions ExtremeXOS EXOS affected versions not specified Description ExtremeXOS EXOS employs a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random sourc...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the snapshot restoration process. An attacker can gain unauthorized root access on the host by importing a specially crafted instance backup containing restricted configuration keys within a snapshot, which ar...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the snapshot restoration process. An attacker can gain unauthorized root access on the host by importing a specially crafted instance backup containing restricted configuration keys within a snapshot, which ar...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the snapshot restoration process. An attacker can gain unauthorized root access on the host by importing a specially crafted instance backup containing restricted configuration keys within a snapshot, which ar...

OESA-2026-2140 PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API. Security Fixes: PackageKit is a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro,...

PT-2026-33926

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...

CVE-2026-41037: Improper Restriction of Excessive Authentication Attempts

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...

CVE-2025-7851

CVE-2025-7851 affects TP-Link Omada gateways. Connected documents corroborate that an attacker may obtain the root shell on the underlying OS under restricted conditions, via issues described as unauthorized root access through a residual debug code/path and improper privilege management. The vul...

EUVD-2002-0747

Malware in sbrugna...

EUVD-2017-17804

Malware in sbrugna...

EUVD-2021-15651

Malware in sbrugna...

CVE-2025-57295

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password "admin," both stored in the /etc/shadow file. Attackers with network access ca...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes K8s that stems from the default credentials enablement, which could lead to unauthorized root...

ROS-20250806-07

The libblockdev library vulnerability is related to file system mount and drive management as a result of incorrect access delimitation when accessing the udisks daemon. as a result of incorrect access delimitation when accessing the udisks daemon. Exploitation of the vulnerability could allow an...

Ununauthorized Root Access

github.com/kubernetes-sigs/image-builder is vulnerable to Unauthorized Root Access. The vulnerability is due to default credentials being enabled during the image build process with the Nutanix, OVA, QEMU, or raw providers, which could allow attackers to gain root access if they reach the VM wher...

AdTran SRG 834-5 HDC17600021F1 安全漏洞

The AdTran SRG 834-5 HDC17600021F1 is a Gigabit Ethernet gateway from Adtran USA. A security vulnerability exists in the AdTran SRG 834-5 HDC17600021F1 SmartOS version 11.1.1.1, which stems from the device having SSH enabled by default, which allows an attacker to gain unauthorized root access by...

The vulnerability of the UART interface in ASUS RT-N12+ B1 microprogramming software allows a intruder to gain unauthorized access to the root terminal.

The vulnerability of the UART interface in ASUS RT-N12+ B1 microprogrammed software routers is related to deficiencies in access control. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to the root terminal...

SUSE-SU-2022:3462-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary processes as root bsc1199278. -...

xrdp 数字错误漏洞

xrdp is an open source remote desktop protocol server from Neutrinolabs Labs. A numeric error vulnerability exists in xrdp, which stems from a product heap overflow integer underflow allowing any unauthenticated attacker with local access to the sesman server to execute code as root...