Lucene search
+L

Exploit for Command Injection in Netgate Pfsense

πŸ—“οΈΒ 24 Oct 2024Β 03:15:30Reported byΒ bl4ckarchTypeΒ 
githubexploit
Β githubexploit
πŸ”—Β github.comπŸ‘Β 786Β Views

Exploit for Command Injection in Netgate Pfsense. The Python script is a Proof-of-Concept (PoC) for the command injection vulnerability (CVE-2023-42326) in pfSense 2.7.0, allowing authenticated attackers to execute arbitrary commands via `interfaces_gif_edit.php` and `interfaces_gre_edit.php`. It supports mode selection, command injection, Netcat reverse shell handling, and debug mode

Related
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Command Injection in Netgate Pfsense
24 Oct 202403:15
–githubexploit
attackerkb
ATTACKERKB
CVE-2023-42326
14 Nov 202305:15
–attackerkb
bdu_fstec
BDU FSTEC
The vulnerability of the interfaces_gif_edit.php and interfaces_gre_edit.php components of the software network interface card based on the FreeBSD Netgate pfSense operating system allows a hacker to execute arbitrary commands.
15 Nov 202300:00
–bdu_fstec
circl
Circl
CVE-2023-42326
12 Dec 202318:42
–circl
cnnvd
CNNVD
pfSense Cross-Site Scripting Vulnerability
14 Nov 202300:00
–cnnvd
cve
CVE
CVE-2023-42326
14 Nov 202300:00
–cve
cvelist
Cvelist
CVE-2023-42326
14 Nov 202300:00
–cvelist
nvd
NVD
CVE-2023-42326
14 Nov 202305:15
–nvd
osv
OSV
CVE-2023-42326
14 Nov 202305:15
–osv
prion
Prion
Design/Logic Flaw
14 Nov 202305:15
–prion
Rows per page

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation