CVE-2026-24061

CVE-2026-24061 Vulnerability Batch Detection Tool ⚠️ Note : CVE-2026-24061 GNU Inetutils is a classic set of network tools provided by the GNU project, which includes the telnetd service, i.e., the Telnet server daemon. In versions 1.9.3 through 2.7, the telnetd service has a fatal flaw in the use...

inetutils-telnetd-auth-bypass

inetutils-telnetd auth bypass lab, CVE-2026-24061 A small lab to play with the auth bypass in inetutils-telnetd 1.9.3 - 2.7 as disclosed on the oss-sec mailing list. 0 This container relies on the fact that inetutils-telnetd is still a vulnerable version in Debian 11 Bullseye. At the time of...

CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template for detecting the CVE-2026-24061 vulnerability in GNU inetutils telnetd, allowing root access without authentication. 📋 Vulnerability Description CVE-2026-24061 is a critical argument injection vulnerability in GNU inetutils telnetd that...

CVE-2026-24061-NSE

CVE-2026-24061 — GNU InetUtils telnetd Authentication Bypass Nmap NSE Detection Script Overview This Nmap NSE script detects CVE-2026-24061 , an authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. By sending a crafted USER environment variable of the form -f...

CVE-2026-24061-POC

CVE-2026-24061 - telnetd Authentication Bypass PoC Critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards About This PoC demonstrates CVE-2026-24061 , a critical authentication bypass vulnerability in...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — GNU Inetutils Telnetd Authentication Bypass...

BIT-CASSANDRA-2026-47846 Default superuser cassandra:cassandra left active when CASSANDRA_USER is customized

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

Astra Linux – Vulnerability in inetutils

In GNU inetutils, the telnet utility in version 2.7 allows servers to read arbitrary environment variables from clients using the NEWENVIRON SENDUSERVAR function...

CVE-2026-32772

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEWENVIRON SEND USERVAR...

EUVD-2026-12154

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEWENVIRON SEND USERVAR...

CVE-2026-32772

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEWENVIRON SEND USERVAR...

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Detection Tool ⚠️ Note: C...

The vulnerability of the telnetd server in the Inetutils network programming package allows a hacker to bypass existing security mechanisms.

The vulnerability of the telnetd server in the Inetutils network programming package is related to improper handling of arguments in the command when processing the USER variable. Exploitation of this vulnerability allows a remote attacker to bypass existing security mechanisms by executing a...

Linux Distros Unpatched Vulnerability : CVE-2025-61789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom...

EUVD-2000-0613

Malware in sbrugna...

CVE-2024-12651

Exposed Dangerous Method or Function vulnerability in PTT Inc. HGS Mobile App allows Manipulating User-Controlled Variables. This issue affects HGS Mobile App: before 6.5.0...

PT-2024-36529 · Unknown · Winmail Server

Name of the Vulnerable Software and Affected Versions: Winmail Server version 4.4 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It involves the f user variable and a specific payload %22%3E%3Csvg%20onload. This type of attack can allow an attacker to inject malicious...

CVE-2023-33175 ToUI allows user-specific variables to be shared between users

ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...

SUSE CVE-2010-3835

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service mysqld server crash by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be...

PT-2018-14634

Name of the Vulnerable Software and Affected Versions SaltOS version 3.1 r8126 Description The issue allows for SQL Injection through the user variable in the action=login endpoint. This can be exploited by injecting malicious SQL code as the user value. Recommendations For SaltOS version 3.1...