rapid7-CVE-2026-15409

CVE-2026-15409 このリポジトリには、CVE-2026-15409の概念実証エクスプロイトが含まれています。これは、localhost:1050で期待されるErlangプロトコルを実装し、それをWebSocket経由でトンネリングして、ファイルの読み書きとRPC呼び出しによる任意のコード実行を実現することにより、SonicWall SMA 1000上で非rootのリモートコード実行を確立します。 使用方法 root@kitploit: python3 cve-2026-15409.py --ws-url...

CVE-2019-20085

📂 CVE-2019-20085 – TVT NVMS-1000 ディレクトリトラバーサルエクスプロイト By Z3R0 作者: Z3R0 CVE: CVE-2019-20085 対象: TVT NVMS-1000（パッチ以前の全ての既知バージョン） 脆弱性の種類: 認証不要のディレクトリトラバーサル 日付: リリース日を挿入 🔍 脆弱性の概要...

TVT NVMS 1000 - Local File Inclusion

TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. id: CVE-2019-20085 info: name: TVT NVMS 1000 - Local File Inclusion author: daffainfo severity: high description: | TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. impact: | An attacker can exploit this...

NVMS-1000-Directory-Traversal-Bash

NVMS-1000-Directory-Traversal-Bash 针对NVMS-1000（CVE-2019-20085）用Bash编写的目录遍历利用工具。 Usage root@kitploit: ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Example root@kitploit: ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Disclaimer 此POC仅用于教育目的。 Reference...

CVE-2026-15409

🚀 CVE-2026-15409 – 通过 WebSocket 代理实现 SonicWall SMA 1000 Erlang RCE CVE-2026-15409 的概念验证（PoC）漏洞利用 – 通过 WebSocket 隧道传输的 Erlang 分布式协议，在 SonicWall SMA 1000 系列设备上实现未认证的远程代码执行。 📖 概述 CVE-2026-15409 是一个影响 SonicWall SMA 1000 设备（2026 年 6 月热修复之前的所有版本）的严重漏洞。该缺陷位于 WorkPlace 服务 （通常暴露在 443 端口）中，该服务将 WebSocket...

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 暴露检测器 一个非侵入式 检测脚本，用于检测受 CVE-2026-83548 （Work Place 接口中的预认证 SSRF，CVSS 10.0）和 CVE-2026-83549 （AMC 中的认证后 OS 命令注入，CVSS 7.8）影响的 SonicWall Secure Mobile Access SMA 1000 系列设备——这两个被积极利用的零日漏洞可被串联以实现未认证 RCE。 这是一个补丁状态 / 暴露检查 ，而非漏洞利用工具。它仅执行只读的 HTTPS GET 请求...

CVE-2025-40602

CVE-2025-40602 📌 概述 CVE-2025-40602 是一个影响 SonicWall Secure Mobile Access SMA 1000 系列设备的本地权限提升漏洞 。 该缺陷存在于 设备管理控制台 AMC ，原因是授权检查不足 ，允许通过身份验证的低权限用户提升权限。 该漏洞已被观察到在野外积极利用 ，尤其是在与其他漏洞结合使用时，可实现对系统的完全入侵。 📝 漏洞描述 该漏洞允许对 SonicWall SMA 1000 管理界面具有受限访问权限 的攻击者执行超出其分配权限的操作。 成功利用后，攻击者可以： 将权限提升到管理员或 root 级别 修改系统配置...

SonicWall-SMA1000-Zero-Day-IoC-Check

SonicWall SMA1000 ゼロデイ IoC チェック 積極的に悪用されているSonicWall SMA 1000シリーズの脆弱性 CVE-2026-15409 および CVE-2026-15410 に関連する、選択された侵害指標に対する非公式のBashベースのログチェックです。 !CAUTION 独立したコミュニティプロジェクト: このリポジトリは、SonicWallやドイツ連邦情報セキュリティ庁（BSI）とは提携しておらず、承認、保守、または支援を受けていません。 !IMPORTANT...

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...

SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote, unauthenticated attacker...

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access SMA 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below -...

CVE-2026-20177

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

CVE-2026-20232

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

CVE-2026-20232

The web-based management interface of Cisco IE 1000 Series Switches fails to validate user-supplied input, enabling an authenticated attacker to inject malicious script into specific pages that executes in another user's session (stored XSS). CVSS 5.4 (MEDIUM) requires valid credentials and user ...

EUVD-2026-62562

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

CVE-2026-20232 Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

EUVD-2026-62559

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

CVE-2026-20177 Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

PT-2026-78491

Name of the Vulnerable Software and Affected Versions Cisco Industrial Ethernet IE 1000 Series Switches affected versions not specified Description Insufficient protection against management plane flooding attacks allows an unauthenticated remote attacker to cause a denial of service DoS conditio...