CVE-2024-53704

nxbender nxbender es un Proof-of-Concept PoC para establecer una conexión VPN mediante NetExtender. Este proyecto se destina exclusivamente a fines educativos y de investigación. Por favor, utilice el código solo en entornos en los que esté explícitamente autorizado. Requisitos Python 3.6+...

NachoVPN

NachoVPN 🌮🔒 NachoVPN 是一个概念验证（Proof of Concept）项目，演示了如何通过恶意 VPN 服务器利用 SSL-VPN 客户端。 它采用基于插件的架构，使社区能够为更多 SSL-VPN 产品贡献支持。目前支持多种流行的企业 VPN 产品，例如 Cisco AnyConnect、SonicWall NetExtender、Palo Alto GlobalProtect 和 Ivanti Connect Secure。 有关更多详细信息，请参阅我们的博客文章，以及 HackFest Hollywood 2024 演讲幻灯片|视频。 安装 先决条件 Pytho...

CVE-2026-66152

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...

CVE-2026-66153

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-66153

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-66153

CVE-2026-66153 is a Link Following (CWE-59) vulnerability in the NEService auto-upgrade process of the SonicWall NetExtender Linux client . The process insecurely handles temporary files, allowing a local attacker with low privileges to manipulate file paths. The CVSS 3.0 score is 7.0 (HIGH) with...

CVE-2026-66152

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...

CVE-2026-66152

CVE-2026-66152 is a path traversal vulnerability (CWE-29) in the OPSWAT tarball component of the SonicWall NetExtender Linux client , allowing an attacker to write an arbitrary file as root . The attack vector is network-based with low complexity and no required privileges , though user interacti...

CVE-2026-66152

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...

SonicWall NetExtender Linux Client Multiple Vulnerabilities

1 CVE-2026-66152 - SonicWall NetExtender arbitrary file write via path traversal vulnerabilityA Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. CVSS Score: 8.8 CVSS Vector:...

PT-2026-81517

Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Linux client affected versions not specified Description A path traversal issue exists within the OPSWAT tarball component. This flaw allows an attacker to write arbitrary files with root privileges. Path traversal is a...

PT-2026-81518

Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Linux client affected versions not specified Description The NEService auto-upgrade process insecurely handles temporary files, which allows an attacker to manipulate file paths. Recommendations At the moment, there is no...

EUVD-2020-26378

Malware in sbrugna...

EUVD-2020-26394

Malware in sbrugna...

EUVD-2015-4196

Malware in sbrugna...

EUVD-2025-10705

Malicious code in bioql PyPI...

EUVD-2025-10703

Malicious code in bioql PyPI...

EUVD-2025-10704

Malicious code in bioql PyPI...

EUVD-2023-48579

Malicious code in bioql PyPI...

SonicWall NetExtender Trojan and ConnectWise Exploits Used in Remote Access Attacks

Unknown threat actors have been distributing a trojanized version of SonicWall's SSL VPN NetExtender application to steal credentials from unsuspecting users who may have installed it. "NetExtender enables remote users to securely connect and run applications on the company network," SonicWall...