6 matches found
hook
Hook Hook exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there is a builtin low privileged user named status that this script...
CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS
An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...
CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS
An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...
CVE-2022-31749
creationtimestamp| type| source ---|---|--- 2022-07-06 09:23:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2651 2025-01-27 23:31:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113902922517927039 2025-01-28 00:16:09+00:00| seen|...