CVE-2019-19781

CVE-2019-19781 Citrix ADC 远程代码执行 Python 用法： python CVE-2019-19781.py http://192.168.3.244 0x01 下载 NSVPX-ESX-13.0-47.22nc64.zip https://www.citrix.com/downloads/citrix-gateway/ 配置静态网络 0x02 Nmap 扫描 root@kitploit: Scanning 192.168.3.244 65535 ports Discovered open port 80/tcp on 192.168.3.244...

sonicrack

Sonicrack 由 Bishop Fox 的 Team X 开发 描述 一款用于解密 SonicOSX NSv 防火墙固件（7.1.1+ 版本）的工具。首先对 OVA 镜像运行它以提取密钥，之后它还可以解密 SIG 镜像。固件可通过有效的许可证从 SonicWall 支持站点 获取。 密钥似乎是每种型号特有的，因此该工具仅适用于 VMware NSv 镜像。理论上，获得其他型号的密钥可以让你解密其他镜像。 该工具已公开，以支持对 SonicOSX 的善意安全研究。详细说明请访问 Bishop Fox 博客。 安装 Debian Linux: root@kitploit: sudo a...

EUVD-2017-5681

Malware in sbrugna...

EUVD-2017-8121

Malware in sbrugna...

EUVD-2011-3893

Malware in sbrugna...

EUVD-2010-4341

Malware in sbrugna...

Malicious code in zucchini-nsv-project (npm)

The package zucchini-nsv-project was found to contain malicious code...

MAL-2025-41116 Malicious code in zucchini-nsv-project (npm)

The package zucchini-nsv-project was found to contain malicious code...

SonicWALL NSv setSshdConfig Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SonicWALL NSv. An attacker must first obtain the ability to execute low-privileged code on the target system or send a TCP packet to a local service in order to exploit this vulnerability. The specific...

SonicWALL NSv SSH Management Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of SonicWALL NSv. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SSH...

SonicWALL NSv Cryptographically Weak PRNG Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is not required to exploit this vulnerability. The specific flaw exists within the generation of cookies. The issue results from the use of a cryptographically weak...

SonicWALL NSv Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Base64-encoded session cookies. The issue results from an incorrect...

PT-2025-1012 · Sonicwall · Gen7 Sonicos Cloud Platform Nsv

Name of the Vulnerable Software and Affected Versions: Gen7 SonicOS Cloud platform NSv affected versions not specified Description: The issue is related to insecure privilege management in the configuration function of the SSH cloud platform. It allows a remote authenticated attacker with low...

Vulnerabilities fixed in SonicOS

Vulnerabilities have been fixed in SonicOS. A malicious party could potentially exploit the vulnerabilities to cause a denial-of-service or to gain access to system data. SonicWall has issued updates to fix the vulnerabilities in SonicOS. For more information, see below:...

DOS Vulnerability discovered in SonicWall Next-Generation Firewall

THREAT LEVEL: Amber For a detailed advisory, download the pdf file here SonicWall, a manufacturer of security hardware discovered a flaw in their SonicOS security operating system that allows denial of service DoS attacks and could lead to remote code execution RCE. The identified vulnerability...

SonicWall NSv Next-Gen Virtual Firewall SSL VPN

Binary data sonicwallnsvsslvpnwebdetect.nbin...

CVE-2017-16952

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

Code injection

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

CVE-2017-16952

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...

CVE-2017-16952

KMPlayer 4.2.2.4 is affected by a denial-of-service vulnerability triggered by a crafted NSV file. Publicly available references (NVD, CNVD, CVE list) describe remote DoS via NSV payload; exploitation examples exist (Exploit-DB, Exploit-Pack). No remediation or fixed version is provided in the su...