CVE-2026-24061

CVE-2026-24061 Reproduction Steps Build the image docker build -t telnetd-bypass . Start the container docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Send the payload USER='-f root' telnet -a 127.0.0.1 23 Output Trying 127.0.0.1... Connected to localhost...

CVE-2025-0133

CVE-2025-0133 Palo Alto PAN-OS reflected XSS in the GlobalProtect gateway and portal getconfig.esp handler. The user query parameter is reflected unencoded into the Captive Portal page; an attacker who lures an authenticated GlobalProtect user to a crafted link can execute JavaScript in the trust...

FLUIG-Vulnerabilidade-CVE-2023-6275

FLUIG-Vulnerabilidade-CVE-2023-6275 Nov 24, 2023 — A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. https://nvd.nist.gov/vuln/detail/CVE-2023-6275 CVE-2023-6275 - Reflected Cross-Site Scripting in TOTVS Fluig Plataform 1.6.X - 1.8.1 The...

CVE-2011-2523

Vsftpd 2.3.4 Backdoor Vulnerability Vulnerability When a hacker inputs a string containing : in the USER parameter, a backdoor opens on port 6200...

CVE-2011-2523

vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...

CVE-2025-0133-exploit

CVE-2025-0133 Scan A script written on python just to check the existence of a CVE-2025-0133 Reflected Cross-Site Scripting vulnerability that occurs in Palo Alto. The file getconfig.esp is detected and tested for XSS using the given script. Usage: darkfear@b0x:/CVE-2025-0133-exploit$ python3...

CVE-2026-24061-setup

CVE-2026-24061 Setup This repository contains the Docker setup for CVE-2026-24061. Once you have installed Docker, just do the following: 1. Clone this repository. 2. Run the following command: sudo docker build . --tag telnetd-auth-bypass 3. Once the docker image is built, we can start the...

CVE-2024-1512

CVE-2024-1512 Proof of Concept Vulnerability Overview CVE-2024-1512 exposes a critical vulnerability in the MasterStudy LMS WordPress Plugin, specifically within the implementation of the /lms/stm-lms/order/items REST route. The issue arises from the plugin's failure to properly escape the 'user'...

CVE-2023-6275

CVE-2023-6275 - Reflected Cross-Site Scripting in TOTVS Fluig Plataform 1.6.X - 1.8.1 The TOTVS Fluig platform, in its versions from 1.6.1.X to 1.8.1, is vulnerable to Cross-Site Scripting in the 'redirectUrl' and 'user' parameters within the 'mobileredir' module. Fluig is the productivity and...

CVE-2026-6182-SQLI-auth

SQL Injection Authentication Bypass - Simple Content Management System PHP Description A SQL Injection vulnerability exists in the admin login page of Simple Content Management System PHP. The user parameter is not sanitized before being passed to the SQL query, allowing an unauthenticated attack...

CVE-2026-104080

Control Web Panel CWP before webpanelversion 1.29 contains an OS command injection vulnerability in the loopback API /validtoken/ route that allows unauthenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the unvalidated 'user' parameter. Attackers ca...

CVE-2026-104080

Control Web Panel (CWP) versions before webpanel_version 1.30 are vulnerable to an OS command injection in the loopback API /valid_token/ route. The vulnerability exists because the application fails to validate the user parameter, allowing unauthenticated attackers to inject shell metacharacters...

EUVD-2026-115249

Control Web Panel CWP before webpanelversion 1.30 contains an OS command injection vulnerability in the loopback API /validtoken/ route that allows unauthenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the unvalidated 'user' parameter. Attackers ca...

CVE-2026-104080 Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token

Control Web Panel CWP before webpanelversion 1.29 contains an OS command injection vulnerability in the loopback API /validtoken/ route that allows unauthenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the unvalidated 'user' parameter. Attackers ca...

CVE-2026-77881 Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter

Control Web Panel CWP before webpanelversion 1.29 contains a blind SQL injection vulnerability in an unauthenticated loopback API route that connects to MySQL as root, where the 'user' parameter is interpolated directly into a query against the oauthclients table. Attackers can send crafted...

CVE-2026-77881 Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter

Control Web Panel CWP before webpanelversion 1.29 contains a blind SQL injection vulnerability in an unauthenticated loopback API route that connects to MySQL as root, where the 'user' parameter is interpolated directly into a query against the oauthclients table. Attackers can send crafted...

CVE-2026-77881

Control Web Panel (CWP) versions before webpanel_version 1.30 are vulnerable to a blind SQL injection via a 'user' parameter. The flaw exists in an unauthenticated loopback API route (originally /user_panel_dashboard/, later /valid_token/) where the parameter is directly interpolated into a query...

CVE-2026-77880 Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/

Control Web Panel CWP before webpanelversion 1.16 contains an OS command injection vulnerability in the loopback API password change route /newpass/, which runs as root. An attacker can inject arbitrary OS commands by manipulating the POST 'user' parameter that is passed unescaped into a shell...

CVE-2026-77880

Control Web Panel (CWP) versions before 1.16 are vulnerable to an OS command injection in the loopback API password change route /newpass/. The flaw exists because the POST user parameter is passed unescaped into a shell command that runs with root privileges . An attacker can exploit this to inj...

CVE-2026-77880 Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/

Control Web Panel CWP before webpanelversion 1.16 contains an OS command injection vulnerability in the loopback API password change route /newpass/, which runs as root. An attacker can inject arbitrary OS commands by manipulating the POST 'user' parameter that is passed unescaped into a shell...