CVE-2024-53704

nxbender nxbender は、NetExtenderを介してVPN接続を確立するProof-of-Concept（PoC）です。 このプロジェクトは教育および研究目的のみを対象としています。明示的に許可された環境でのみコードを使用してください。 前提条件 Python 3.6+ （推奨：Python 3.8以上） pip （Pythonパッケージインストーラ） 依存関係： configargparse requests colorlog pyroute2 必要なパッケージは、例えば以下のようにインストールします： root@kitploit: pip install...

SVPT_CW_2

CVE-2024-21413 https://github.com/KartheekKandalam99/SVPTCW2 CVE-2024-21413 CW 설정 TRYHACKME는 이 취약점을 실습할 수 있는 룸을 제공합니다. 아래는 룸에 접속하기 위한 링크입니다. https://tryhackme.com/r/room/monikerlink RDP를 통해 룸에 접속하려면 TryHackMe VPN에 연결해야 합니다. VPN 구성 파일을 다운로드하려면 이 링크를 클릭하세요. https://tryhackme.com/r/access VPN 구성 파일을...

CVE-2026-0257-PoC

CVE-2026-0257 — Обход аутентификации PAN-OS GlobalProtect PoC удаленного обнаружения Только обнаружение. Без эксплуатации. Без отправки учетных данных. Без подделки куки. Обзор CVE-2026-0257 — это уязвимость обхода аутентификации CWE-565 — Зависимость от куки без проверки и контроля целостности в...

CVE-2026-16348

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-22225

A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 and Archer AXE75 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of...

CVE-2026-22225 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0

A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 and Archer AXE75 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of...

EUVD-2025-198021

An Exposed IOCTL with Insufficient Access Control vulnerability CWE-782 in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would require bypassing t...

EUVD-2009-1261

Malware in sbrugna...

EUVD-2018-2668

Malware in sbrugna...

EUVD-2021-23764

Malware in sbrugna...

EUVD-2007-2456

Malware in sbrugna...

EUVD-2025-3167

Malicious code in bioql PyPI...

EUVD-2024-15812

Malicious code in bioql PyPI...

CVE-2024-54019

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection...

CVE-2021-37190

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user...

CVE-2018-10381

TunnelBear 3.2.0.6 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "TunnelBearMaintenance" service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "OpenVPNConnect"...

RLSA-2025:0377 Moderate: Security and bug fixes for NetworkManager

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

CVE-2025-23415

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux. Note:...