CVE-2019-9161

CVE-2019-9161 affects Sangfor Sundray WLAN Controller (WAC) versions 3.7.4.2 and earlier. The issue is a remote code execution vulnerability where shell metacharacters in the nginx_webconsole.php Cookie header allow an attacker to read /etc/config/wac/wns_cfg_admin_detail.xml, exposing the admin ...

CVE-2019-9160

The CVE-2019-9160 issue affects Sangfor Sundray/WAC, specifically version 3.7.4.2 and earlier. It enables a backdoor SSH login on TCP 22345, allowing remote access beyond the WebUI and enabling root escalation because the root password is the WebUI admin password concatenated with a static string...

CVE-2019-9160

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the system via SSH on TCP port 22345 and escalate to root because the password for root is the WebUI admin password concatenated with a static string...

Apache HTTP Server components to mention the right vulnerability alerts-a vulnerability alert-the black bar safety net

Recently, the Aapche HTTP Server official release of the Aapche HTTP Server 2.4.39 version update, this version fixes a bug number for CVE-2019-0211 mention the right vulnerability, the vulnerability rating of high risk, according to Sangfor security team, the vulnerabilities impact severity, the...

WannaMine upgrade to V3. 0 version, the alert caught it! - Vulnerability warning-the black bar safety net

Recently, several companies feedback a large number of hosts and services, the presence of Cottonwood and blue screen phenomenon, in the quest for Sangfor assists after using EDR for the entire network scan found a large number of hosts infected by the same virus. Sangfor security team Research...

Command Injection Vulnerability in SANGFOR AF

SANGFOR AF is a next-generation application firewall designed with application security needs in mind. A command injection vulnerability exists in SANGFOR AF 7.5.1 and earlier versions, which can be exploited by attackers to execute arbitrary system commands and gain root privileges...

Command Injection Vulnerability in SANGFOR AF

SANGFOR AF is a next-generation application firewall designed with application security needs in mind. A command injection vulnerability exists in SANGFOR AF 7.4 and earlier versions, which can be exploited by attackers to execute arbitrary system commands and gain root privileges...