227 matches found
pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...
pfsense-api-acme-key-dump
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-acme-key-dump pfsense-api-acme-key-dump Class: Privilege leftover Reach: Remote pfSense Plus Nexus Multi-instance Management OpenAPI toolkit b4acd7ca - Netgate GET /services/acme GetACMEConfig returns...
pfsense-api-unix-sock-noauth
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-unix-sock-noauth pfsense-api-unix-sock-noauth Class: Privilege leftover Reach: Local pfSense Plus MIM API b4acd7ca - Netgate github.com/Netgate/pfsense-api is the public OpenAPI plus generated Python for...
pfsense-api-export-key-get
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-export-key-get pfsense-api-export-key-get Class: Privilege leftover Reach: Remote pfSense Plus MIM API Netgate pin b4acd7ca - public OpenAPI + generated Python client for the Nexus Multi-instance Managemen...
pfsense-api-snort-file-join
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-snort-file-join pfsense-api-snort-file-join Class: File read Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate GET /services/snort/rules/name/file takes two path parameters, both...
CVE-2025-69690-CVE-2025-69691
🔐 CVE-2025-69690 & CVE-2025-69691 Authenticated Remote Code Execution in Netgate pfSense Community Edition 📋 Summary Field| Details ---|--- Researcher| Nelson Adhepeau @privlabs Vendor| Netgate Product| pfSense Community Edition Versions| 2.7.2 and 2.8.0 Type| Authenticated Remote Code Execution...
CVE-2026-111228 Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php
Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sockqueuetimeout parameter...
CVE-2026-111223
Netgate pfSense CE 2.7.0 through 2.9.0 is vulnerable to a configuration injection flaw in the IPsec Mobile login banner . Authenticated users with IPsec Mobile privileges can execute commands as root by submitting a single-line banner containing a } character. This allows them to escape the unquo...
CVE-2026-78902
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.
CVE-2026-78902
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
CVE-2026-78849
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
EUVD-2026-71610
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
CVE-2026-78849
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
CVE-2026-78849
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense Plus software (versions <= 26.03) and pfSense CE software (versions
Netgate pfSense Plus - Login Panel Detection
Netgate pfSense Plus firewall login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netgate pfSense Plus firewall login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netgate pfSense Plu...
CVE-2025-69691: Improper Access Control
Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.execphp. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code...
EUVD-2016-10864
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
CVE-2016-20057
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
CVE-2016-20058
CVE-2016-20058 affects Netgate AMITI Antivirus build 23.0.305, where an unquoted service path in the AmitiAvSrv and AmitiAntivirusHealth services allows a local attacker to escalate privileges. By placing a malicious executable in the unquoted path, triggering a service restart or system reboot e...
CVE-2016-20058 Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation
Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or...