Sangfor NGAF - loadfile.php File Read

Reads arbitrary files via Sangfor Next Gen Application Firewall /svpnhtml/loadfile.php file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor NGAF loadfile.php arbitrary file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Sangfor Next-Generation Application Firewall (NGAF) - Login Panel Detection

Sangfor NGAF is a next-generation application firewall and SSL VPN gateway by Sangfor Technologies. It is widely deployed in APAC and China-based enterprises. The management portal is frequently exposed on non-standard ports. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor NGAF is a...

CVE-2023-30804

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpnhtml/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated...

Sangfor NGAF Authentication Bypass

Sangfor NGAF are vulnerable to an Authentication Bypass allowing a remote to perform various unauthorized actions with a specially crafted HTTP request. Exploiting this vulnerability can lead to a Remote Code Execution. No source data...

CVE-2023-30806

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to...

CVE-2023-30805

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling ...

CVE-2023-30805

CVE-2023-30805 - Sangfor NGAF Affected: Sangfor Next-Gen Application Firewall NGAF version 8.0.17. Vulnerability: An operating system command injection vulnerability exists when processing the value of the un parameter sent via an HTTP POST to /LogInOut.php . Root cause cited as mishandling of sh...

CVE-2023-30804

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files via the svpn_html/loadfile.php endpoint due to a lack of protection for service data. This vulnerabilit...

CVE-2023-30803

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is susceptible to an authentication bypass vulnerability. A remote, unauthenticated attacker can circumvent authentication mechanisms to access administrative functionality by sending crafted HTTP requests containing a malicious Y-forwa...

CVE-2023-30802

CVE-2023-30802 affects Sangfor Next-Gen Application Firewall NGAF 8.0.17. Multiple connected sources confirm a source-code disclosure vulnerability exploitable remotely by an unauthenticated attacker through HTTP requests with an invalid Content-Length header, enabling access to PHP source code. ...