[POC] CVE-2026-24061 — CVE-2026-24061--telnetdJan 23, 2026
pocexploitCVE-2026-24061
GNU InetUtils telnetd 远程身份认证绕过漏洞（CVE-2026-24061），此漏洞主要影响 telnetd 在调用系统 /usr/bin/login 程序时，未对从客户端 USER 环境变量传入的用户名做过滤，直接拼接到 login 命令行。未经授权的远程攻击者可利用该缺陷，在无需任何口令的情况下直接获取目标主机的 root shell。
基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测工具
Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation
CVE-2026-24061 Batch Scanning Tool
Bypass d’authentification Telnet menant à un accès root
🚀 Bypass CVE-2025-55182 protections with this tool, enhancing security assessments and streamlining vulnerability testing against WAF configurations.
CVE-2026-2395: Tar race file collision
Unauthenticated vulnerability that may allow remote attackers to compromise confidentiality and integrity, potentially leading to full system compromise.
CVE-2026-22200: Arbitrary file read + CNEXT RCE in osTicket
Proof of Concept (PoC) for SQL Injection in Xhibiter NFT Marketplace 1.10.2 (Collections Endpoint). Discovered by Sohel Yousef.
A small docker lab to play with cve-2026-24061, the inetutils-telnetd authentication bypass.
React Router's createFileSessionStorage() in certain versions allows unsigned cookies to be manipulated, enabling file system access outside the session directory.
CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool
Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari
The PoC of information disclosure in Microsoft Desktop Windows Management.
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.