38 matches found
WatchGuard XTM Firebox Unauthenticated Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'zlib' class MetasploitModule 'WatchGuard XTM Firebox Unauthenticated Remote Command Execution', 'Description' = %q This module exploits a buffer overflow at the...
CVE-2024-26318
creationtimestamp| type| source ---|---|--- 2024-02-19 05:21:16+00:00| seen| https://t.me/ctinow/187449 2024-02-19 05:26:07+00:00| seen| https://t.me/ctinow/187450 2024-02-20 05:22:20+00:00| seen| https://t.me/arpsyndicate/3550 2025-03-25 19:24:56+00:00| seen|...
CVE-2024-26318
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character...
CVE-2024-26318
Serenity CVE-2024-26318: In Serenity up to version 6.7.x, LoginPage.tsx allows return URLs not starting with a slash, which enables Cross‑Site Scripting via phishing/email links. The issue is described across multiple sources (Serenity release notes and Red Hat/Veracode advisories) as a client-si...
CVE-2023-26318
creationtimestamp| type| source ---|---|--- 2023-10-11 12:17:14+00:00| seen| https://t.me/cibsecurity/72060...
CVE-2023-26318
CVE-2023-26318 affects Xiaomi Router web interface. The connected sources describe a post-authorization stack/buffer overflow caused by a buffer copy without checking input size (boundary error in input handling). The vulnerability can overflow buffers in the Xiaomi Router; explicit exploit detai...
WatchGuard XTM Firebox Unauthenticated Remote Command Execution
This module exploits a buffer overflow at the administration interface 8080 or 4117 of WatchGuard Firebox and XTM appliances which is built from a cherrypy python backend sending XML-RPC requests to a C binary called wgagent using pre-authentication endpoint /agent/login. This vulnerability impac...
Watchguard Firebox and XTM Remote Code Execution (CVE-2022-26318)
A remote code execution vulnerability exists in Watchguard Firebox and XTM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Exploit for CVE-2022-26318
watchguardcve-2022-26318 Watchguard RCE POC CVE-2022-26318...
VulnCheck KEV: CVE-2022-26318
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code...
CVE-2022-26318
creationtimestamp| type| source ---|---|--- 2022-03-04 20:30:20+00:00| seen| https://t.me/cibsecurity/38451 2022-03-27 12:55:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1727 2022-04-15 00:32:33+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6169 2022-04-17...
CVE-2022-26318
This CVE (CVE-2022-26318) affects WatchGuard XTM/Firebox appliances running Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2, enabling unauthenticated remote code execution via the admin interface. Technical details in connected docs show in-the-wild...
CVE-2022-26318
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8, and 12.2.x through 12.5.x before 12.5.9U2...
CVE-2021-26318
creationtimestamp| type| source ---|---|--- 2021-10-13 22:26:50+00:00| seen| https://t.me/cibsecurity/30532...
CVE-2021-26318 Side-channels Related to the x86 PREFETCH Instruction
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...
CVE-2021-26318
CVE-2021-26318 corresponds to a timing and power-based side-channel issue on some AMD CPUs that could potentially leak kernel address space information via the x86 PREFETCH instruction. Affected software/hardware: all AMD CPUs (per AMD: Side-channels Related to the x86 PREFETCH Instruction). Root...
Side-channels Related to the x86 PREFETCH Instruction
Bulletin ID: AMD-SB-1017 Potential Impact: Leaked kernel address space information Severity: Medium Summary Researchers from Graz University of Technology with CISPA Helmholtz Center for Information Security have demonstrated timing and power-based side channel attacks leveraging the x86 PREFETCH...