Sophos-Vulnerability

Анализ уязвимости CVE-2022-1040 Sophos RCE В исследовательской группе Toasec, занимающейся наступательной кибербезопасностью, мы взяли на себя задачу провести анализ этой уязвимости в межсетевых экранах Sophos. Данная уязвимость, как и многие другие, может быть обнаружена и найдена, если уметь...

CVE-2022-1040

CVE-2022-1040 poc가 당신과 함께하길 밖에서 주워온 것 root@kitploit: curl --insecure -H "X-Requested-With: XMLHttpRequest" -X POST 'https://x.x.x.x/userportal/Controller?mode=8700&operation=1&datagrid=179&json="🦞":"test"'...

UltraRealy_with_CVE-2019-1040

Lazaar Sami가 CVE-2019-1040 익스플로잇을 위해 업데이트한 UltraRelay UltraRelay는 LLMNR 중독 및 NTLM 자격 증명 릴레이를 위한 도구입니다. Responder와 impack을 기반으로 합니다. 원본 버전https://github.com/5alt/ultrarelay을 CVE-2019-1040 익스플로잇을 위해 업데이트했습니다. Dirk-jan Mollema는 ntlmrelayxhttps://github.com/CoreSecurity/impacket의 일부를 업데이트하여...

cve-2019-1040-scanner

CVE-2019-1040 스캐너 SMB를 통해 CVE-2019-1040 취약점을 확인합니다. 이 스크립트는 대상 호스트에 연결하여 잘못된 NTLM 인증을 전송합니다. 이것이 수락되면 호스트는 CVE-2019-1040에 취약하며, ntlmrelayx와 함께 MIC 제거 공격을 실행할 수 있습니다. 로그인 정보 자체는 유효하므로 실패한 로그인 시도가 생성되지 않는다는 점에 유의하십시오. 단지 NTLM 메시지 무결성 코드가 없기 때문에 인증이 거부되며, badpwdcount는 증가하지 않습니다. 사용법 이 스크립트는 최신...

Sophos Firewall <=18.5 MR3 - Remote Code Execution

Sophos Firewall version v18.5 MR3 and older contains an authentication bypass vulnerability in the User Portal and Webadmin which could allow a remote attacker to execute code. id: CVE-2022-1040 info: name: Sophos Firewall =18.5 MR4 to mitigate this vulnerability. reference: -...

CVE-2019-1040-dcpwn

CVE-2019-1040-dcpwn 훌륭한 글입니다! CVE-2019-1040 악용 - RCE 및 도메인 관리자 권한 획득을 위한 릴레이 취약점 결합 . 그래서 사용하기 쉽게 dcpwn.py를 작성했습니다. 요구 사항 이 도구들은 impacket이 필요합니다. pip로 설치할 수 있습니다. root@kitploit: pip install impacket 사용법 root@kitploit: usage: dcpwn.py -h -u USERNAME -p PASSWORD --hashes HASHES -d DOMAIN --smb-port...

CVE-2022-1040

このリポジトリには README がありません。...

dcpwn

dcpwn Скрипт, зависящий от impacket, эксплуатирующий CVE-2019-1040, с кодом, частично заимствованным у тех исследователей безопасности, которым я хочу выразить благодарность. При более внимательном рассмотрении вы обнаружите, что сама техника использования уязвимости несколько отличается от того,...

CVE-2026-40250

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1040 performs chan-width chan-bytesperelement in...

EUVD-2026-24047

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1040 performs chan-width chan-bytesperelement in...

PT-2026-33909

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.9 OpenEXR versions 3.3.0 through 3.3.9 OpenEXR versions 3.2.0 through 3.2.7 Description An integer overflow occurs in the reference implementation of the EXR image storage format. The issue exists in internal...

EUVD-2019-3657

Malware in sbrugna...

CVE-2020-1040

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-103...

CVE-2025-1040

creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:49+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836597412892 2025-03-20 13:03:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45lvir2w 2025-03-20 13:13:06+00:00| seen|...

CVE-2025-1040

CVE-2025-1040 : AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that can lead to Remote Code Execution (RCE). The root cause is improper handling of user-supplied format strings in the AgentOutputBlock, where input is passed to the Jinja2 templating en...

CVE-2025-1040 Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to t...

CVE-2025-1040 Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to t...

CVE-2025-1040 Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to t...

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...

CVE-2024-1040

creationtimestamp| type| source ---|---|--- 2024-02-01 23:26:37+00:00| seen| https://t.me/ctinow/177825 2024-02-24 10:11:21+00:00| seen| https://t.me/ctinow/192524 2025-05-09 19:26:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15821...