106 matches found
CVE-2021-26088
PoC for CVE-2021-26088 用 PowerShell 编写 描述 FSSO Collector 中的认证漏洞可能允许未经认证的用户绕过任何防火墙认证规则，通过发送特制的 UDP 登录通知数据包访问受保护的网络。 https://www.fortiguard.com/psirt/FG-IR-20-191 内容 forgeauth.ps1：主要利用脚本 checksrcport.ps1：获取分配给当前用户的源端口范围 免责声明...
Telstra-Cybersecurity-Virtual-Experience-
Telstra-Cybersecurity-Virtual-Experience-Program 我以信息安全分析师的身份参与了 Telstra 的安全运营中心，以亲身体验 Telstra 安全分析师的日常工作与职责。所执行的任务如下： 1. 对其 nbn 服务上的恶意软件攻击（CVE-2022-22965）进行了分类，并通过联系相应团队来响应此次恶意软件攻击。 2. 分析恶意软件的数据，以确定其传播方式。 3. 利用识别出的模式，使用 Python 编程语言制定防火墙规则，以防止恶意软件进一步传播。 4. 撰写了该恶意软件攻击的事件事后分析报告，涵盖我在先前任务中掌握到的细节。 防火墙...
Spring4Shell
Spring4Shell 在这个挑战中，我分析了 Spring4Shell CVE-2022-22965 漏洞，研究了安全绕过方法，并撰写了一份事件事后分析报告，详细说明了攻击的检测、影响和解决方案。我还用 Python 实现了一条防火墙规则，以阻止恶意请求并防止未来的利用。...
CVE-2026-49131
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or JavaScript by embedding payloads in the firewall rule description field via the filter API endpoint. The unsanitized...
CVE-2026-49131 OPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or JavaScript by embedding payloads in the firewall rule description field via the filter API endpoint. The unsanitized...
CVE-2026-49131
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or JavaScript by embedding payloads in the firewall rule description field via the filter API endpoint. The unsanitized...
CVE-2026-49131 OPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or JavaScript by embedding payloads in the firewall rule description field via the filter API endpoint. The unsanitized...
CVE-2026-10120
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of the file /goform/formSetFirewallRule. The manipulation of the argument firewallname results in stack-based buffer overflow. The attack can be executed remotely. The exploit is...
EUVD-2026-33462
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of the file /goform/formSetFirewallRule. The manipulation of the argument firewallname results in stack-based buffer overflow. The attack can be executed remotely. The exploit is...
TRENDnet TEW-432BRP 安全漏洞
TRENDnet TEW-432BRP is a dual-band wireless router produced by TRENDnet Corporation. Version 3.10B20 of TRENDnet TEW-432BRP contains a security vulnerability. This vulnerability arises from the operation of the formSetFirewallRule function in the file/goform/formSetFirewallRule, where the paramet...
GHSA-39G5-644C-QWCG container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command
Product Name: container Github Link: https://github.com/apple/container Version: = 0.12.2 Summary The container system dns create --localhost command accepts a domainName argument and passes it unsanitized into the pf anchor file /etc/pf.anchors/com.apple.container as a comment in a rule line. A...
PT-2026-45099
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-432BRP version 3.10B20 Description A stack-based buffer overflow occurs when manipulating the firewall name argument within the formSetFirewallRule function located in the '/goform/formSetFirewallRule' file. This issue allows for...
PT-2026-33766
Name of the Vulnerable Software and Affected Versions Progress ADC Products affected versions not specified Description An OS Command Injection flaw in the user interface allows an authenticated attacker with "All" permissions to execute arbitrary commands on the LoadMaster appliance. This occurs...
CVE-2017-20233
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access...
CVE-2026-27850
Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200...
CVE-2026-27850 Improper verification in Linksys MR9600, Linksys MX4200
Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200...
400,000 WordPress Sites Affected by Account Takeover Vulnerability in Post SMTP WordPress Plugin
On October 11th, 2025, we received a submission for an Account Takeover via Email Log Disclosure vulnerability in Post SMTP, a WordPress plugin with more than 400,000 active installations. This vulnerability makes it possible for an unauthenticated attacker to view email logs, including password...
EUVD-2013-3380
Malware in sbrugna...