268 matches found
Sophos-Vulnerability
Analysis of Vulnerability CVE-2022-1040 Sophos RCE In the research group Toasec, dedicated to offensive cybersecurity, we took on the task of analyzing this vulnerability in Sophos firewalls. This vulnerability, like many others, can be reported and found if you know how to search on Twitter, whe...
cve-2022-1040
Environment In Python Environment3.10 It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...
Sophos Firewall <= 19.0 MR1 - Remote Code Execution
Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...
CVE-2022-1040
CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin portal auth bypass and rce all in one script; The vulnerability affects Sophos Firewall v18.5 MR3 18.5.3 and older Mitigation: update to latest version asap https://support.sophos.com/support/s/article/KB-000043853?language=enUS to avoid...
CVE-2022-0331
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older...
Sophos Firewall SPX Code Execution
The vulnerability of the Secure PDF eXchange SPX function of the Sophos Firewall previously called Sophos XG Firewall exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability can allow a remote attacker t...
Sophos Firewall SMTP Proxy Code Execution
The vulnerability of the SMTP proxy layer of Sophos Firewall formerly known as Sophos XG Firewall relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Up2Date Component Code Execution
The vulnerability of the Up2Date component of the Sophos Firewall formerly known as Sophos XG Firewall is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Sophos Firewall WebAdmin Code Execution
The vulnerability of the WebAdmin interface of Sophos Firewall formerly Sophos XG Firewall relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EUVD-2021-12178
Malware in sbrugna...
EUVD-2021-12179
Malware in sbrugna...
EUVD-2025-22086
Malicious code in bioql PyPI...
EUVD-2022-43070
Malicious code in bioql PyPI...
EUVD-2022-25086
Malicious code in bioql PyPI...
EUVD-2024-51076
Malicious code in bioql PyPI...
EUVD-2022-43066
Malicious code in bioql PyPI...
EUVD-2022-43067
Malicious code in bioql PyPI...
EUVD-2024-54805
Malicious code in bioql PyPI...