CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

238 matches found

Nuclei•added 2026/09/06 2:04 a.m.•32 views

Sophos Firewall <= 19.0 MR1 - Remote Code Execution

Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...

9.8CVSS9.5AI score0.98905EPSS

SaveExploits0References2

Kitploit•added 2026/09/05 2:39 p.m.•4 views

Sophos-Vulnerability

CVE-2022-1040（Sophos RCE）漏洞分析在Toasec研究团队中，我们致力于进攻性网络安全，并着手分析了Sophos防火墙中的此漏洞。该漏洞与许多其他漏洞一样，如果你知道如何在推特上搜索，就可以发现并被通知。我们观察到自三月份起，开始出现关于RCE的文章。来源：https://www.bleepingcomputer.com/news/security/critical-sophos-firewall-vulnerability-allows-remote-code-execution/ 如果我们查看拥有POC的仓库 root@kitploit: POST...

9.8CVSS8.1AI score0.99796EPSS

SaveExploits9References2

Kitploit•added 2026/09/02 10:39 a.m.•4 views

cve-2022-1040

環境 Python環境3.10の場合 root@kitploit: It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...

9.8CVSS8.5AI score0.99796EPSS

SaveExploits9

Kitploit•added 2026/08/30 2:22 p.m.•3 views

CVE-2022-1040

CVE-2022-1040-sophos-rce-poc sophos rce poc script de omisión de autenticación y ejecución remota de código RCE todo en uno para el portal webmin de Sophos; La vulnerabilidad afecta a Sophos Firewall v18.5 MR3 18.5.3 y anteriores Mitigación: actualizar a la última versión lo antes posible...

9.8CVSS9.1AI score0.99796EPSS

SaveExploits9

RedhatCVE•added 2026/01/09 9:13 a.m.•17 views

CVE-2022-0331

An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older...

5.3CVSS6.7AI score0.01506EPSS

SaveExploits0References1

BDU FSTEC•added 2025/10/15 12:00 a.m.•12 views

The vulnerability of the WebAdmin interface of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.

The vulnerability of the WebAdmin interface of Sophos Firewall formerly Sophos XG Firewall relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.7CVSS6.4AI score0.09243EPSS

SaveExploits0References3

EUVD•added 2025/10/07 12:30 a.m.•11 views

EUVD-2021-12178

Malware in sbrugna...

8.5CVSS8.2AI score0.01076EPSS

SaveExploits0References2

EUVD•added 2025/10/07 12:30 a.m.•9 views

EUVD-2021-12179

Malware in sbrugna...

8.4CVSS8.2AI score0.00898EPSS

SaveExploits0References2

EUVD•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-54805