CVE-2026-32746

This PoC exploits a buffer overflow in GNU InetUtils telnetd's SLC handler by sending a crafted LINEMODE SLC suboption with excess triplets, causing an out-of-bounds write and BSS data leak. It demonstrates the vulnerability but does not include shellcode or ROP chains for full RCE.

This repository contains a functional Python-based exploit for CVE-2026-32746 and CVE-2026-24061, targeting GNU InetUtils telnetd. It includes both detection and exploitation capabilities, with an interactive root shell for CVE-2026-24061 and crash-based detection for CVE-2026-32746.

This repository contains a functional proof-of-concept exploit for CVE-2026-32746, a pre-authentication buffer overflow in GNU InetUtils telnetd's LINEMODE SLC handler. The exploit triggers the vulnerability by sending crafted SLC suboptions with excess triplets, causing an out-of-bounds write and verifying the overflow via leaked BSS memory in the server's response.

This exploit sends a hardcoded shellcode payload to a vulnerable telnet server (version ≤2.7) to bypass authentication and achieve remote code execution (RCE). The shellcode appears to be x86 Linux shellcode for spawning a shell.

This repository contains a functional exploit PoC for CVE-2026-32746, a pre-authentication buffer overflow in GNU InetUtils telnetd's LINEMODE SLC handler. The exploit triggers an out-of-bounds write by sending crafted SLC suboptions and verifies the overflow via response analysis.

The repository contains a functional Python-based exploit for CVE-2026-32746, targeting an OOB write vulnerability in GNU Inetutils Telnetd's LINEMODE SLC handling. The PoC demonstrates remote code execution via crafted Telnet suboptions.

This repository provides a detailed technical analysis of CVE-2026-32746, a buffer overflow in GNU inetutils telnetd. It includes findings on BSS layout, write primitives, and a reliable PIE base info leak, concluding that RCE is not achievable but DoS and info leak are exploitable.

This repository provides a detailed technical analysis and mitigation tool for CVE-2026-32746, a hypothetical vulnerability in a memory-unsafe Telnet daemon. It includes architectural diagrams, workflow logic, and a modular Python tool for remediation.

This repository contains a functional exploit for CVE-2026-24061, targeting GNU InetUtils telnetd versions 1.9.3 to 2.7. The exploit leverages the NEW-ENVIRON Telnet option to inject a crafted USER variable, bypassing authentication and granting a root shell.

The repository contains a Python script designed to detect the presence of CVE-2026-32746 in telnetd by checking for LINEMODE support and generating detection artifacts. It does not exploit the vulnerability but scans for its presence.

This repository contains a functional PoC for CVE-2026-32746, a pre-authentication buffer overflow in GNU InetUtils telnetd's LINEMODE SLC handler. The exploit triggers a crash via a crafted SLC suboption, confirming vulnerability, while the detector script safely checks for LINEMODE support.