CVE-2021-24006

CVE-2021-24006 – Эксплойт неправильного контроля доступа FortiManager PoC PoC Proof of Concept – Только для образовательных целей Эксплойт неправомерного доступа к SD-WAN Orchestrator в FortiManager, использующий уязвимость контроля доступа CWE-284. Описание Уязвимость CVE-2021-24006 затрагивает...

CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Сканер RCE без аутентификации Многопоточный сканер уязвимости CVE-2025-54322, неаутентифицированной уязвимости удаленного выполнения кода в прошивке XSpeeder SXZOS, затрагивающей 70 000+ хостов по всему миру. 📋 Содержание Об уязвимости Возможности Установка...

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN 제로데이 CVE-2026-20127, 2023년부터 관리자 액세스를 위해 악용됨. 이 저장소는 CVE-2026-20127에 대한 작동하는 개념 증명 익스플로잇을 포함하고 있습니다. 이는 Cisco Catalyst SD-WAN Controller 이전 vSmart 및 Catalyst SD-WAN Manager 이전 vManage의 중요한 사전 인증 취약점으로, 2023년부터 실제 환경에서 활발히 악용되었습니다. 이 취약점은...

Cisco SD-WAN vManage Software - Local File Inclusion

Cisco SD-WAN vManage Software in the application data endpoints is vulnerable to local file inclusion which could allow an unauthenticated, remote attacker to gain access to sensitive information. id: CVE-2020-26073 info: name: Cisco SD-WAN vManage Software - Local File Inclusion author: madrobot...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

neurax

Фреймворк, помогающий в создании самораспространяющегося ПО Обзор С помощью Neurax бинарные файлы Golang могут распространяться по LAN/WAN без использования внешних серверов. Разнообразные параметры конфигурации и командные стейджеры позволяют быстро распространяться в различных беспроводных...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – Эксплойт недостатка контроля доступа FortiManager PoC PoC Proof of Concept - Только для образовательных целей Эксплойт несанкционированного доступа к SD-WAN Orchestrator в FortiManager, использующий ошибку контроля доступа CWE-284. Описание Уязвимость CVE-2021-24006 затрагивает...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

VMware NSX SD-WAN Edge - Command Injection

VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Эксплойт повышения привилегий Cisco SD-WAN ⚠️ ПРЕДУПРЕЖДЕНИЕ Этот код предназначен ТОЛЬКО для образовательных целей и авторизованных тестов безопасности. 📋 Описание CVE-2026-20245 — это уязвимость повышения привилегий в CLI Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalyst...

CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127-Cisco SD-WAN 사전 인증 원격 코드 실행 개요 이 저장소는 Cisco Catalyst SD-WAN Controller구 vSmart 및 Cisco Catalyst SD-WAN Manager구 vManage 배포 환경에 영향을 미치는 치명적인 사전 인증 원격 코드 실행RCE 취약점인 CVE-2026-20127 에 대한 개념 증명PoC 익스플로잇 을 포함하고 있습니다. 이 취약점은 원격의 인증되지 않은 공격자가 Cisco SD-WAN 인프라의 관리 및 제어 플레인 구성 요소와 직접 상호 작용할 ...

CVE-2026-20127

CVE-2026-20127 개요 Cisco Catalyst SD-WAN Controller 인증 우회 취약점 CVE-2026-20127에 대한 익스플로잇입니다. 이 익스플로잇은 vbondprocchallengeackack 핸들러를 대상으로 합니다. 공격자가 제어하는 verifystatus=1 바이트가 포함된 위조된 CHALLENGEACKACK 메시지msgtype=10를 전송하여 서버가 피어 항목에 대해 authenticated=1을 설정하도록 직접 강제합니다. 작동 방식 일반적인 DTLS 제어 플레인 핸드셰이크에서: 1...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN 제로데이 CVE-2026-20131, 2023년부터 관리자 접근을 위해 악용됨. 이 저장소는 CVE-2026-20131에 대한 작동하는 개념 증명 익스플로잇을 포함하고 있습니다. 이는 Cisco Catalyst SD-WAN Controller구 vSmart 및 Catalyst SD-WAN Manager구 vManage의 치명적인 사전 인증 취약점으로, 2023년부터 실제 환경에서 적극적으로 악용되어 왔습니다. 이 취약점은...

CVE-2026-102294

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

cve-2026-20127

CVE-2026-20127 스캐너 개요 이 프로젝트는 C++로 작성된 Windows 기반 네트워크 스캐닝 도구로, 잠재적인 Cisco SD-WAN / vManage 유사 서비스를 식별하고 CVE-2026-20127로 표시된 참조 이슈에 대한 취약점 점검을 수행합니다. 기능 IP 범위 스캐닝시작 → 종료 IP Cisco SD-WAN / vManage 지표에 대한 서비스 핑거프린팅 HTTP 응답 헤더 및 본문 분석 의심되는 관리 엔드포인트에 테스트 요청 전송 응답 콘텐츠 및 상태 코드 기반 노출 가능성 탐지 간단한 대화형 CLI...

CVE-2026-102294 Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

EUVD-2026-90974

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

CVE-2026-102294

The TP-Link TL-WR841N router is susceptible to an authenticated OS command injection vulnerability within the IPv6 WAN configuration . The root cause is the improper incorporation of a crafted IPv6 Gateway value into a system command. This allows an authenticated administrator to execute arbitrar...