880 matches found
pfsense 2.3.2 Cross Site Request Forgery
Security Advisory - Curesec Research Team 1. Introduction Affected Product: pfsense 2.3.2 Fixed in: 2.3.3 Fixed Version Link: https://pfsense.org/download/ Vendor Website: https://www.pfsense.org/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 02/06/2017 Disclosed to public:...
pfsense 2.3.2 Code Execution Vulnerability
Overview pfsense is an open source firewall. The web interface is written in PHP. In version 2.3.2-RELEASE amd64, the setup wizard is vulnerable to code execution. It should be noted that by default, only an administrator can access the setup wizard. By default, administrators have far-reaching...
pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting
Exploit Title: pfSense 2.3.2 XSS - CSRF-bypass & Reverse-root-shell Date: 01/03/2017 Author: Yann CAM @ASafety / Synetis Vendor or Software Link: www.pfsense.org Version: 2.3.2 Category: XSS, CSRF-bypass and Remote root reverse-shell Access Google dork: Tested on: FreeBSD pfSense firewall/router...
pfSense 2.3.2 - Cross-Site Scripting / Cross-Site Request Forgery
Exploit Title: pfSense 2.3.2 XSS - CSRF-bypass & Reverse-root-shell Date: 01/03/2017 Author: Yann CAM @ASafety / Synetis Vendor or Software Link: www.pfsense.org Version: 2.3.2 Category: XSS, CSRF-bypass and Remote root reverse-shell Access Google dork: Tested on: FreeBSD pfSense firewall/router...
pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
pfSense version 2.3.2 suffers from cross site request forgery and cross site scripting vulnerabilities that can assist in gaining a reverse-shell remotely as root. Exploit Title: pfSense 2.3.2 XSS - CSRF-bypass & Reverse-root-shell Date: 01/03/2017 Author: Yann CAM @ASafety / Synetis Vendor or...
pfSense 2.3.2 - Cross-Site Scripting Cross-Site Request Forgery
pfSense 2.3.2 - Cross-Site Scripting Cross-Site Request Forgery Exploit Title: pfSense 2.3.2 XSS - CSRF-bypass & Reverse-root-shell Date: 01/03/2017 Author: Yann CAM @ASafety / Synetis Vendor or Software Link: www.pfsense.org Version: 2.3.2 Category: XSS, CSRF-bypass and Remote root reverse-shell...
DMA Radius Manager 4.1.5 Cross Site Request Forgery
tanks: Dr Ms Jk - n1arash - Milad Hacking - malahsky...
pfSense Squid < 0.4.18 Multiple Vulnerabilities - Active Check
Squid running on pfSense is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pfsense:pfsense";...
ESF pfSense squid_clwarn.php Cross Site Scripting
A cross-site scripting vulnerability has been reported in squid package of Electric Sheep Fencing pfSense firewall. The vulnerability is due to insufficient validation of the url, source, user and virus variables in the squidclwarn.php page. By convincing a user to visit a malicious website, a...
pfSense 2.3.1-RELEASE-p1 Squid 0.4.16_2 XSS / Log Manipulation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. VULNERABILITY - ------------------------- Multiple vulnerabilities in squid 0.4.162 running on pfSense Version 2.3.1-RELEASE-p1 II. BACKGROUND - ------------------------- The pfSense project is a free network firewall distribution, based on the...
ESF pfSense status_rrd_graph_img.php Command Injection
A Command Injection vulnerability has been reported in ESF pfSense. This vulnerability is due to statusrrdgraphimg.php incorrectly validating the graph HTTP parameter. A remote, authenticated attacker can exploit this vulnerability by sending crafted requests to the statusrrdgraphimg.php URI...
pfSense Firewall <= 2.2.6 - Services CSRF
No description provided by source...
PfSense Community Edition <= 2.2.6 命令注入等多个漏洞
No description provided by source...
pfSense Firewall Cross-Site Request Forgery Vulnerability (CNVD-2016-02624)
pfSense is a free, open-source customized version of FreeBSD designed for use as a firewall and router. A cross-site request forgery vulnerability exists in pfSense. Due to insufficient script validation of HTTP requests, a remote attacker can spoof a logged-in administrator to access malicious w...
pfSense Firewall Cross-Site Request Forgery Vulnerability
pfSense is a free, open-source customized version of FreeBSD designed for use as a firewall and router. pfSense suffers from a cross-site request forgery vulnerability. diagbackup.php does not validate all functions sufficiently. Allows an attacker to upload malicious files...
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community...
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities
, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community Edition = 2.2.6 PDF:...
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities
Exploit for php platform in category web applications PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community Edition ' s...
PfSense Community Edition 2.2.6 CSRF / XSS / Command Injection
, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community Edition = 2.2.6 PDF:...