CVE-2022-1040

CVE-2022-1040 que el PoC te acompañe Encontrado por ahí curl --insecure -H "X-Requested-With: XMLHttpRequest" -X POST 'https://x.x.x.x/userportal/Controller?mode=8700&operation=1&datagrid=179&json="🦞":"test"'...

dcpwn

dcpwn un script dependiente de impacket que explota CVE-2019-1040, con código tomado en parte de aquellos investigadores de seguridad a los que quiero agradecer. si observas más de cerca, verás que la técnica para explotar la vulnerabilidad es ligeramente diferente a lo que se cree comúnmente...

CVE-2019-1040-dcpwn

CVE-2019-1040-dcpwn ¡Gran artículo! Explotando CVE-2019-1040 - Combinando vulnerabilidades de relay para RCE y Admin de Dominio . Por lo tanto, escribí dcpwn.py para facilitar su uso. Requisitos Estas herramientas requieren impacket. Puedes instalarlo desde pip pip install impacket Uso usage:...

cve-2019-1040-scanner

Escáner de CVE-2019-1040 Comprueba la vulnerabilidad CVE-2019-1040 sobre SMB. El script establecerá una conexión con el/los hosts objetivo y enviará una autenticación NTLM inválida. Si esta es aceptada, el host es vulnerable a CVE-2019-1040 y puedes ejecutar el ataque MIC Remove con ntlmrelayx. T...

Sophos-Vulnerability

Análisis Vulnerabilidad CVE-2022-1040 Sophos RCE En el grupo de investigación Toasec, dedicado a ciberseguridad ofensiva nos dimos la tarea de realizar el análisis sobre esta vulnerabilidad en los firewalls de Sophos. Dicha vulnerabilidad como muchas otras pueden ser notificadas y encontradas si...

UltraRealy_with_CVE-2019-1040

UltraRelay actualizado por Lazaar Sami para el exploit CVE-2019-1040 UltraRelay es una herramienta para el envenenamiento LLMNR y la retransmisión de credenciales NTLM. Se basa en Responder e impack. He actualizado la versión original https://github.com/5alt/ultrarelay para el exploit...

CVE-2022-1040

CVE-2022-1040...

Sophos Firewall <=18.5 MR3 - Remote Code Execution

Sophos Firewall version v18.5 MR3 and older contains an authentication bypass vulnerability in the User Portal and Webadmin which could allow a remote attacker to execute code. id: CVE-2022-1040 info: name: Sophos Firewall =18.5 MR4 to mitigate this vulnerability. reference: -...

CVE-2026-40250

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1040 performs chan-width chan-bytesperelement in...

EUVD-2026-24047

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1040 performs chan-width chan-bytesperelement in...

PT-2026-33909

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.9 OpenEXR versions 3.3.0 through 3.3.9 OpenEXR versions 3.2.0 through 3.2.7 Description An integer overflow occurs in the reference implementation of the EXR image storage format. The issue exists in internal...

EUVD-2019-3657

Malware in sbrugna...

CVE-2020-1040

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-103...

CVE-2025-1040

creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:49+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836597412892 2025-03-20 13:03:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45lvir2w 2025-03-20 13:13:06+00:00| seen|...

CVE-2025-1040

CVE-2025-1040 : AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that can lead to Remote Code Execution (RCE). The root cause is improper handling of user-supplied format strings in the AgentOutputBlock, where input is passed to the Jinja2 templating en...

CVE-2025-1040 Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to t...

CVE-2025-1040 Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to t...

CVE-2025-1040 Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to t...

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...

CVE-2024-1040

creationtimestamp| type| source ---|---|--- 2024-02-01 23:26:37+00:00| seen| https://t.me/ctinow/177825 2024-02-24 10:11:21+00:00| seen| https://t.me/ctinow/192524 2025-05-09 19:26:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15821...