EUVD-2012-3216

Malware in sbrugna...

EUVD-2007-3243

Malware in sbrugna...

EUVD-2007-4226

Malware in sbrugna...

EUVD-2007-4225

Malware in sbrugna...

EUVD-2017-15376

Malware in sbrugna...

CVE-2012-3238

Cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment optional" field...

Design/Logic Flaw

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

CVE-2017-6315 affects Sophos Astaro Security Gateway (ASG) v7. It permits unauthenticated remote code execution by sending a crafted request to the index.plx file. Several connected sources (NVD/CVELIST entries and exploit/public details) corroborate unauthenticated RCE via index.plx, highlightin...

PT-2017-16994

Name of the Vulnerable Software and Affected Versions Astaro Security Gateway aka ASG version 7 Description The issue allows remote attackers to execute arbitrary code via a crafted request to "index.plx". Recommendations For Astaro Security Gateway aka ASG version 7, consider restricting access ...

CVE-2017-6315: Improper Input Validation

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

Astaro Security Gateway 7 Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

Astaro Security Gateway 7 Remote Code Execution

!/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE: CVE-2017-6315 import socket import sys import os import...

Astaro Security Gateway 7 - Remote Code Execution

Astaro Security Gateway 7 - Remote Code Execution !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

CVE-2013-5932

Technical details for CVE-2013-5932 are not publicly available in the provided documents. No confirmed affected versions, root cause, or remediation are given. Monitor for updates.

Astaro Security Gateway 8.1 - HTML Injection

Astaro Security Gateway 8.1 - HTML Injection source: https://www.securityfocus.com/bid/51301/info Astaro Security Gateway is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML...

Astaro Security Gateway 8.1 - HTML Injection

source: https://www.securityfocus.com/bid/51301/info Astaro Security Gateway is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...

CVE-2012-3238

Cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment optional" field...