sophucked

sophucked CVE-2020-25223 RCE PoC, ottiene una reverse shell. Pre-autenticazione. Implementato rapidamente poiché era necessario unificare alcuni magneti di minaccia. Esempio di utilizzo: root@kitploit: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + avvio handler sulla porta 80 + Invio...

CVE-2018-17431-Comodo

CVE-2018-17431-PoC Prova di concetto per CVE-2018-17431 Exploit Title: Comodo Firewall & Central Manager UTM Tutte le versioni precedenti alla 2.7.0 e 1.5.0 Esecuzione di comandi remoti basato su Web Shell Autore dell'exploit: Milad Fadavvi Homepage del fornitore: https://www.comodo.com/ Link del...

CVE-2018-17431-PoC

CVE-2018-17431-PoC Beweis des Konzepts für CVE-2018-17431 Exploit-Titel: Comodo Firewall & Central Manager UTM Alle Versionen vor 2.7.0 & 1.5.0 Remote-Befehlsausführung Web-Shell-basiert Exploit-Autor: Milad Fadavvi Hersteller-Homepage: https://www.comodo.com/ Software-Link:...

SecurePoint UTM 12.x Session ID Leak

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to the administrative interface. id:...

Securepoint UTM - Leaking Remote Memory Contents

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not use...

CVE-2020-25223

CVE-2020-25223 Uno script PoC per testare CVE-2020-25223 contro un Sophos UTM vulnerabile. Dato un indirizzo IP, lo script tenta di scaricare una copia del file /etc/shadow del dispositivo. Ricerca originale: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CVE-2026-77115

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

EUVD-2026-64638

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

CVE-2026-77115

Brave Popup Builder (WordPress plugin) versions up to 0.8.5 are affected by an unauthenticated reflected XSS vulnerability. The root cause is the reflection of UTM query parameters into popup form HTML without proper output escaping, allowing an attacker to inject arbitrary script via crafted URL...

CVE-2026-77115 Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

CVE-2026-57351

CVE-2026-57351 affects the WordPress plugin HandL UTM Grabber up to version 2.9.2, with an unauthenticated XSS vulnerability. The connected documents provide the vulnerability type and affected software but do not supply root cause specifics, exploit details, or a remediation. CVSS data (3.1) fro...

CVE-2026-57351 WordPress HandL UTM Grabber plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in HandL UTM Grabber = 2.9.2 versions...

CVE-2026-57351

Unauthenticated Cross Site Scripting XSS in HandL UTM Grabber = 2.9.2 versions...

CVE-2026-56026

Subscriber Server Side Request Forgery SSRF in utm.codes = 1.9.0 versions...

CVE-2026-56026

The WordPress utm.codes plugin (versions

WordPress utm.codes plugin <= 1.9.0 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by theviper17 in WordPress Plugin utm.codes versions = 1.9.0...

WordPress WP Statistics plugin <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'utmsource' Parameter vulnerability discovered by daroo in WordPress Plugin WP Statistics versions = 14.16.4...

EUVD-2026-23342

The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utmsource' parameter in all versions up to, and including, 14.16.4. This is due to insufficient input sanitization and output escaping. The plugin's referral parser copies the raw utmsource value into the...

CVE-2022-0652

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710...

CVE-2024-39340

The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has...