CVE-2023-39008

A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands...

CVE-2023-38999

OPNsense CSRF in the System Halt API (/system/halt) affects Community Edition <23.7 and Business Edition

CVE-2023-38999

A Cross-Site Request Forgery CSRF in the System Halt API /system/halt of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a Denial of Service DoS via a crafted GET request...

PT-2023-8202 · Opnsense · Opnsense

Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: A directory traversal vulnerability exists in the Captive Portal templates of OPNsense, allowing attackers to execute arbitrary...

Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems

The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially exploited to crash the program or trigger remote code execution. The issue, assigned the identifier CVE-2022-23093, impacts all supported...

OPNsense Cross-Site Scripting Vulnerability

OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso Inc. A cross-site scripting vulnerability exists in versions prior to OPNsense 21.7.4. An attacker can exploit the vulnerability by returning LDAP attributes in the authentication tester to conduct...

CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

Cross site scripting

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

CVE-2021-42770

CVE-2021-42770 affects OPNsense prior to 21.7.4. The vulnerability is a Cross-site Scripting (XSS) flaw that can be triggered via the LDAP attribute return in the authentication tester. Impact is limited to contexts that render the affected LDAP attribute data in a user’s browser; no exploitation...

CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

Deciso OPNsense 跨站脚本漏洞

OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso Inc. A cross-site scripting vulnerability exists in versions prior to OPNsense 21.7.4. An attacker can exploit the vulnerability by returning LDAP attributes in the authentication tester to conduct...

CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...

CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...

Open redirect

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...

CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...

CVE-2020-23015

CVE-2020-23015 affects OPNsense up to version 20.1.5. The login page accepts a url parameter that is not filtered, enabling an open redirect to external sites. This could facilitate phishing or information exposure by redirecting authenticated users to malicious destinations. The connected Nuclei...

Deciso OPNsense 输入验证错误漏洞

Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from Dutch company Deciso. A security vulnerability exists in OPNsense version 20.1.5 and earlier versions, which stems from the discovery of an open redirect issue. The redirection parameter "url" on the login...

Deciso OPNsense Access Control Error Vulnerability

Deciso OPNsense is a FreeBSD-based open source firewall and routing software from Dutch company Deciso. An Access Control Error vulnerability in Deciso OPNsense version 18.7.x prior to 18.7.7, which arises from a network system or product that does not properly restrict access to resources from...