59 matches found
cve-2022-31749
CVE-2022-31749 1vere$k 작성 CVE-2022-31749를 위한 간단한 PoC 체커, 1vere$k 작성. 이는 WatchGuard SSH 인터페이스의 매개변수 주입 취약점을 악용합니다. 이 취약점은 낮은 권한의 사용자가 임의의 시스템 파일을 공격자가 제어하는 FTP 서버로 유출할 수 있도록 합니다. 다행히도, 이 스크립트는 기본적으로 status라는 내장된 낮은 권한 사용자를 사용합니다. status 사용자가 readonly 비밀번호를 사용할 것이라고 가정하는 것이 무리는 아니지만, 필수는 아닙니다. 익스플로...
The vulnerability of the configd daemon in operating systems running macOS, which allows a perpetrator to compromise the accessibility of protected information
The vulnerability of the configd daemon in macOS operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...
CVE-2026-30868 Cross-Site Request Forgery (CSRF) in opnsense/core
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...
CVE-2026-30868 Cross-Site Request Forgery (CSRF) in opnsense/core
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...
CVE-2026-30868 Cross-Site Request Forgery (CSRF) in opnsense/core
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...
CVE-2026-30868
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...
CVE-2026-30868
OPNsense/CVE-2026-30868 is a CSRF flaw in the FreeBSD-based firewall platform where multiple MVC API endpoints allow state-changing actions via HTTP GET without CSRF protection. The CSRF validation in ApiControllerBase applies only to POST/PUT/DELETE, enabling an authenticated user to trigger pri...
CVE-2026-30868: Cross-Site Request Forgery (CSRF)
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...
PT-2026-24742
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...
EUVD-2020-12489
Malware in sbrugna...
EUVD-2020-12488
Malware in sbrugna...
EUVD-2021-7537
Malicious code in bioql PyPI...
CVE-2025-6183 Configd Injection
The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...
CVE-2025-6183 Configd Injection
The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...
CVE-2021-20075
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd...
CVE-2023-39005
Insecure permissions exist for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2...
PT-2023-26731 · Opnsense · Opnsense Business Edition +1
Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: The issue is related to insecure permissions for configd.socket. Recommendations: For OPNsense Community Edition versions prior ...
Deciso OPNsense Security Vulnerability
Deciso OPNsense is a FreeBSD-based open source firewall and routing software from the Dutch company Deciso. A security vulnerability exists in OPNsense versions prior to 23.7, which stems from a permission misconfiguration issue in configd.socket...
