CacheGuard config import eval injection RCE

Admin login and multipart upload to /gui/conf-load-save.apl injects $cmd into config; transaction commit eval executes as admin. !/usr/bin/env python3 -- coding: utf-8 -- """CacheGuard authenticated config import eval injection RCE.""" from future import annotations import re from urllib.parse...

CacheGuard — Authenticated Config-Import Eval Injection → RCE — Detect

Fingerprint / reachability check for CacheGuard — Authenticated Config-Import Eval Injection → RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CacheGuard — Authenticated Config-Import Eval Injection → RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

EUVD-2014-4784

Malware in sbrugna...

CacheGuard-OS 5.7.7 - CSRF Vulnerability

No description provided by source. I. VULNERABILITY ------------------------- CSRF vulnerabilities in CacheGuard-OS v5.7.7 II. BACKGROUND ------------------------- CacheGuard is an All-in-One Web Security Gateway providing firewall, web antivirus, caching, compression, URL filtering, proxy, high...

CacheGuard-OS 5.7.7 - Cross-Site Request Forgery

CacheGuard-OS 5.7.7 - Cross-Site Request Forgery I. VULNERABILITY ------------------------- CSRF vulnerabilities in CacheGuard-OS v5.7.7 II. BACKGROUND ------------------------- CacheGuard is an All-in-One Web Security Gateway providing firewall, web antivirus, caching, compression, URL filtering...

CacheGuard-OS 5.7.7 - CSRF Vulnerability

Exploit for linux platform in category web applications I. VULNERABILITY ------------------------- CSRF vulnerabilities in CacheGuard-OS v5.7.7 II. BACKGROUND ------------------------- CacheGuard is an All-in-One Web Security Gateway providing firewall, web antivirus, caching, compression, URL...

CacheGuard-OS 5.7.7 - Cross-Site Request Forgery

I. VULNERABILITY ------------------------- CSRF vulnerabilities in CacheGuard-OS v5.7.7 II. BACKGROUND ------------------------- CacheGuard is an All-in-One Web Security Gateway providing firewall, web antivirus, caching, compression, URL filtering, proxy, high availability, content filtering,...

CVE-2014-4865

Cross-site request forgery CSRF vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-4865

Cross-site request forgery CSRF vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-4865

CSRF in CacheGuard OS 5.7.7 affects /gui/password-wadmin.apl allowing an attacker to hijack authenticated sessions. Root cause: missing CSRF validation in that endpoint; impact includes potential privilege/user authentication manipulation with partial confidentiality/ integrity/availability. CVSS...

CVE-2014-4865: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attackers to hijack the authentication of arbitrary users...

PT-2014-6176

Name of the Vulnerable Software and Affected Versions CacheGuard OS version 5.7.7 Description A cross-site request forgery CSRF issue exists in the gui/password-wadmin.apl component, allowing remote attackers to hijack the authentication of arbitrary users. This can be exploited by tricking a use...

CacheGuard-OS 5.7.7 Cross Site Request Forgery

I. VULNERABILITY ------------------------- CSRF vulnerabilities in CacheGuard-OS v5.7.7 II. BACKGROUND ------------------------- CacheGuard is an All-in-One Web Security Gateway providing firewall, web antivirus, caching, compression, URL filtering, proxy, high availability, content filtering,...

CacheGuard OS contains a cross-site request forgery vulnerability

Overview CacheGuard OS v5.7.7 does not sufficiently verify whether a valid request was intentionally provided by the user, which results in a cross-site request forgery CSRF vulnerability. Description CWE-352: Cross-Site Request Forgery CSRF CacheGuard OS v5.7.7 does not sufficiently verify wheth...