145 matches found
📄 Sophos Web Virtual Appliance 3.7.0 Directory Traversal
Proof of concept exploit for an older vulnerability from 2013 where Sophos Web Virtual Appliance version 3.7.0 suffered from a directory traversal vulnerability...
EUVD-2016-10359
Malware in sbrugna...
EUVD-2016-10360
Malware in sbrugna...
EUVD-2017-15249
Malware in sbrugna...
EUVD-2017-15469
Malware in sbrugna...
EUVD-2017-15248
Malware in sbrugna...
EUVD-2013-2582
Malware in sbrugna...
EUVD-2013-4828
Malware in sbrugna...
EUVD-2020-24134
Malware in sbrugna...
EUVD-2017-18454
Malware in sbrugna...
EUVD-2023-37499
Malicious code in bioql PyPI...
EUVD-2022-52188
Malicious code in bioql PyPI...
CVE-2023-33336
Reflected cross site scripting XSS vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes...
CVE-2023-1671
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code...
CVE-2020-36692
A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that must be manually submitted by the victim while logged in to SWA...
CVE-2014-2849
The Change Password dialog box changepassword in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request...
CVE-2013-4984
The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...
CVE-2014-2850
The network interface configuration page netinterface in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter...
CVE-2013-4983
The getreferers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php...