258 matches found
Sophos-Vulnerability
CVE-2022-1040 Sophos RCE 脆弱性分析 攻撃的サイバーセキュリティを専門とする研究グループ Toasec, では、Sophos ファイアウォールにおけるこの脆弱性の分析を実施しました。 この脆弱性は、他の多くの脆弱性と同様に、twitter で検索する方法を知っていれば発見・報告できます。そこでは、3月頃からこの RCE に関する記事が現れ始めたことを確認しました。 出典:...
CVE-2022-1040
CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin ポータルの認証バイパスとRCEをすべて1つのスクリプトに統合; この脆弱性はSophos Firewall v18.5 MR3 18.5.3 およびそれ以前のバージョンに影響します。 緩和策: できるだけ早く最新バージョンに更新してください https://support.sophos.com/support/s/article/KB-000043853?language=enUS このスクリプトの悪用を防ぐため、無料ではありません:...
cve-2022-1040
環境 Python環境3.10の場合 root@kitploit: It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...
Sophos Firewall <= 19.0 MR1 - Remote Code Execution
Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...
CVE-2022-0331
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older...
The vulnerability of the SMTP proxy network interface component of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the SMTP proxy layer of Sophos Firewall formerly known as Sophos XG Firewall relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Secure PDF eXchange (SPX) function of the Sophos Firewall (formerly known as Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the Secure PDF eXchange SPX function of the Sophos Firewall previously called Sophos XG Firewall exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability can allow a remote attacker t...
The vulnerability of the Up2Date component of Sophos Firewall’s network interfaces (previously called Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the Up2Date component of the Sophos Firewall formerly known as Sophos XG Firewall is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the WebAdmin interface of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the WebAdmin interface of Sophos Firewall formerly Sophos XG Firewall relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EUVD-2021-12178
Malware in sbrugna...
EUVD-2021-12179
Malware in sbrugna...
EUVD-2024-54805
Malicious code in bioql PyPI...
EUVD-2024-51076
Malicious code in bioql PyPI...
EUVD-2024-54804
Malicious code in bioql PyPI...
EUVD-2025-22086
Malicious code in bioql PyPI...
EUVD-2025-22085
Malicious code in bioql PyPI...
EUVD-2022-43066
Malicious code in bioql PyPI...
EUVD-2023-57852
Malicious code in bioql PyPI...