170 matches found
CVE-2024-53704
nxbender nxbender is a Proof-of-Concept PoC for establishing a VPN connection via NetExtender. This project is intended solely for educational and research purposes. Please only use the code in environments where you are explicitly authorized. Prerequisites Python 3.6+ recommended: Python 3.8 or...
NachoVPN
NachoVPN 🌮🔒 NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server. It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by the community. It currently supports various popular corporate VPN...
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...
CVE-2026-66153
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...
EUVD-2026-65960
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...
CVE-2026-66153
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...
CVE-2026-66153
The SonicWall NetExtender Linux client is vulnerable to an Improper Link Resolution Before File Access (CWE-59) vulnerability within the NEService auto-upgrade process . This flaw arises because the process insecurely handles temporary files, allowing an attacker to manipulate file paths . The vu...
CVE-2026-66153
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...
EUVD-2026-65747
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root...
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...
CVE-2026-66152
A Path traversal vulnerability exists in the SonicWall NetExtender Linux client file extractor component, specifically within the OPSWAT tarball . This flaw allows an attacker to write arbitrary files with root privileges by using special characters like ../ to access directories outside the inte...
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...
SonicWall NetExtender Linux Client Multiple Vulnerabilities
1 CVE-2026-66152 - SonicWall NetExtender arbitrary file write via path traversal vulnerabilityA Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. CVSS Score: 8.8 CVSS Vector:...
PT-2026-81517
Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Linux client affected versions not specified Description A path traversal issue exists within the OPSWAT tarball component. This flaw allows an attacker to write arbitrary files with root privileges. Path traversal is a...
CVE-2026-66152: Path Traversal: '\..\filename'
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...
CVE-2026-66153: Improper Link Resolution Before File Access
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...
PT-2026-81518
Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Linux client affected versions not specified Description The NEService auto-upgrade process insecurely handles temporary files, which allows an attacker to manipulate file paths. Recommendations At the moment, there is no...
EUVD-2020-26378
Malware in sbrugna...