watchguard-sso-client

Proof of Concept for Watchguard SSO Agent Vulnerabilitites CVE-2024-6592, CVE-2024-6593, CVE-2024-6594 Details are described in our advisories available at: CVE-2024-6592 CVE-2024-6593 CVE-2024-6594 The script requires the Python click library to run. Examples Issue Arbitrary Commands to SSO...

WatchGuard Fireware AD Helper Component - Credentials Disclosure

WatchGuard Fireware Threat Detection and Response TDR service contains a credential-disclosure vulnerability in the AD Helper component that allows unauthenticated attackers to gain Active Directory credentials for a Windows domain in plaintext. id: CVE-2020-10532 info: name: WatchGuard Fireware ...

cve-2022-31749

CVE-2022-31749 by 1vere$k CVE-2022-31749 的简易 PoC 检测器，作者 1vere$k。 它利用了 WatchGuard SSH 接口中的一个参数注入漏洞。 该漏洞允许低权限用户将任意系统文件外泄到攻击者控制的 FTP 服务器。 幸运的是，脚本默认使用一个名为 status 的内置低权限用户。 假设 status 用户 使用 readonly 密码，这并非不合理，但并非必须。 该利用程序外泄用户文件 configd-hash.xml。 此文件包含哈希后的用户密码。 哈希只是无盐 MD4。@funoverip 早在2013年就描述了使用 hashca...

hook

Hook Hook explota una vulnerabilidad de inyección de parámetros en la interfaz SSH de WatchGuard. La vulnerabilidad permite que un usuario con pocos privilegios exfiltre archivos arbitrarios del sistema a un servidor FTP controlado por un atacante. Afortunadamente, existe un usuario incorporado c...

Watchguard-RCE-POC-CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 Watchguard RCE POC CVE-2022-26318 El CVE para este problema es CVE-2022-26318...

log4shell-iocs

Log4Shell-IOCs IOC feeds curated by WatchGuard Threat Lab that contain recent attempts to probe or exploit CVE-2021-44228 in Log4j2 Analyst Comments 2021-12-17 Threats shared in this feed should be used for THREAT HUNTING and added to a WATCHLIST. We strongly recommend NOT adding them to a...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Generador de artefactos de detección para WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f Consulta nuestra entrada de blog para obtener detalles técnicos Detección en acción python...

Watchguard-RCE-POC-CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 PoC for Watchguard CVE-2022-26318 更新为适用于 Python3.12，因为 ssl.wrapsocket 已被弃用。 PoC 最初来自 https://github.com/h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318/blob/main/POCwg.py...

watchguard_cve-2022-26318

watchguardcve-2022-26318 Prueba de concepto de RCE en Watchguard CVE-2022-26318 !/usr/bin/python3 -- coding: utf-8 - - CVE-2022-26318 import socket import ssl import gzip Remote WatchGuard XTM or FireWare OS RHOST = "1.1.1.1" Local host with nc listener: nc -l 8.8.8.8 8888 LHOST = "8.8.8.8" def...

CVE-2025-1910-WatchGuard-Privilege-Escalation

Escalada de privilegios en WatchGuard Mobile VPN with SSL Client CVE-2025-1910 Una vulnerabilidad de escalada de privilegios en Mobile VPN with SSL de WatchGuard MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Sirva el archivo malicioso...

CVE-2026-13043

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

Watchguard_WebUI_Unpacker

Desempaquetador de actualización de la interfaz web de Watchguard Fireware unpackwatchguard es una herramienta que desempaqueta este formato de archivo sysa-dl. watchguardsysadl.ksy contiene la descripción Kaitai del formato de archivo de actualización web de Watchguard Fireware. Información Este...

EUVD-2026-90898

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043

WatchGuard endpoint security products are affected by a missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) . A local, authenticated attacker can bypass the driver's access-control handshake to issue arbitrary privileged commands. This flaw allows for the disclosure o...

CVE-2026-13043: Missing Authentication for Critical Function

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

PT-2026-103920

Name of the Vulnerable Software and Affected Versions WatchGuard endpoint security products affected versions not specified Description A missing authentication issue in the Kernel Memory Access Driver PSKMAD allows a local, authenticated attacker to bypass the access-control handshake. This...

CVE-2025-14733

WatchGuard IKEv2 Scanner — CVE-2025-14733 Identifica los dispositivos WatchGuard Firebox vulnerables a CVE-2025-14733, una vulnerabilidad crítica de preautenticación en la implementación de IKEv2 del sistema Fireware OS. Esta herramienta realiza una detección segura de versiones mediante la...

CVE-2026-86134

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...