271 matches found
cve-2022-1040
Environment In Python Environment3.10 It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...
CVE-2022-1040
CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin portal auth bypass and rce all in one script; The vulnerability affects Sophos Firewall v18.5 MR3 18.5.3 and older Mitigation: update to latest version asap https://support.sophos.com/support/s/article/KB-000043853?language=enUS to avoid...
Sophos-Vulnerability
Analysis of Vulnerability CVE-2022-1040 Sophos RCE In the research group Toasec, dedicated to offensive cybersecurity, we took on the task of analyzing this vulnerability in Sophos firewalls. This vulnerability, like many others, can be reported and found if you know how to search on Twitter, whe...
Sophos Firewall <= 19.0 MR1 - Remote Code Execution
Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...
Sophos Firewall Auth Bypass RCE (CVE-2022-1040)
Exploits CVE-2022-1040 in Sophos Firewall =18.5 MR3: authentication bypass in User Portal /userportal/Controller enables pre-auth Java deserialization RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Firewall userportal auth bypass RCE CVE-2022-1040.""" import re from kittysploit import...
Sophos Firewall Login Panel - Detect
Sophos Firewall login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Firewall login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Firewall Login Panel - Detect',...
Sophos Firewall <=18.5 MR3 - Remote Code Execution Detection
Sophos Firewall version v18.5 MR3 and older contains an authentication bypass vulnerability in the User Portal and Webadmin which could allow a remote attacker to execute code. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Firewall version v18.""" from kittysploit import from...
CVE-2022-0331
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older...
Sophos Firewall SMTP Proxy Code Execution
The vulnerability of the SMTP proxy layer of Sophos Firewall formerly known as Sophos XG Firewall relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Sophos Firewall SPX Code Execution
The vulnerability of the Secure PDF eXchange SPX function of the Sophos Firewall previously called Sophos XG Firewall exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability can allow a remote attacker t...
Up2Date Component Code Execution
The vulnerability of the Up2Date component of the Sophos Firewall formerly known as Sophos XG Firewall is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Sophos Firewall WebAdmin Code Execution
The vulnerability of the WebAdmin interface of Sophos Firewall formerly Sophos XG Firewall relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EUVD-2021-12179
Malware in sbrugna...
EUVD-2021-12178
Malware in sbrugna...
EUVD-2022-43055
Malicious code in bioql PyPI...
EUVD-2022-42637
Malicious code in bioql PyPI...
EUVD-2022-43068
Malicious code in bioql PyPI...
EUVD-2025-22084
Malicious code in bioql PyPI...