CVE-2026-56126

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /statusmonitoring.php. Multiple POST parameters including graph-left, graph-right, time-period, resolution, start-date...

CVE-2026-56128

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallscheduleedit.php. The schedule description is stored without HTML sanitization and subsequently inserted into an...

CVE-2026-56128

pfSense Plus before 26.07 and pfSense CE before 2.9.0 contain a stored cross-site scripting vulnerability in the firewall schedule editor. Authenticated users with the Firewall: Schedules: Edit privilege can inject arbitrary JavaScript via the descr parameter in /firewall_schedule_edit.php. The v...

EUVD-2026-70498

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallscheduleedit.php. The schedule description is stored without HTML sanitization and subsequently inserted into an...

CVE-2026-56128 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallscheduleedit.php. The schedule description is stored without HTML sanitization and subsequently inserted into an...

EUVD-2026-70496

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

CVE-2026-56127

pfSense Plus before 26.07 and pfSense CE before 2.9.0 are affected by a stored XSS in /firewall_rules_edit.php. An authenticated user holding the Firewall: Rules: Edit privilege can inject arbitrary JavaScript via the descr parameter. The rule description is persisted in the pfSense XML configura...

CVE-2026-56126 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /statusmonitoring.php. Multiple POST parameters including graph-left, graph-right, time-period, resolution, start-date...

CVE-2026-56126

pfSense Plus before 26.07 and CE before 2.9.0 contain a stored cross-site scripting (XSS) vulnerability in /status_monitoring.php . Authenticated users holding the Status: Monitoring privilege can inject arbitrary JavaScript by supplying unsanitized values in multiple POST parameters (e.g., graph...

EUVD-2026-70495

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /statusmonitoring.php. Multiple POST parameters including graph-left, graph-right, time-period, resolution, start-date...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Recorrido Completo de Pruebas de Penetración Objetivo: HackSudo Thor de VulnHub Objetivo: Obtener acceso root y leer /root/proof.txt Entorno: Laboratorio aislado de VirtualBox segmentado por un firewall pfSense Tabla de Contenidos Resumen Topología de Red Resumen de la Cadena de...

dod-blue-team-network-lab

Laboratorio de Seguridad y Fortalecimiento de Red del Equipo Azul del DoD Resumen Ejecutivo Laboratorio de seguridad defensiva de alta fidelidad que simula una red empresarial alineada con el DoD. Este proyecto demuestra segmentación de red estructurada, endurecimiento de sistemas, ingesta de...

CVE-2014-4688-pfsense

CVE-2014-4688 – Inyección de Comandos en pfSense Prueba de concepto modificada de Exploit-DB para CVE-2014-4688 inyección de comandos en pfSense statusrrdgraphimg.php Resumen Este repositorio contiene una versión modificada de la prueba de concepto original de Exploit-DB para CVE-2014-4688 , que...

CVE-2024-46538

Gracias aphysicszq, quien descubrió esta vulnerabilidad. CVE-2024-46538 ★ CVE-2024-46538 PoC de XSS almacenado en PfSense que conduce a Ejecución Arbitraria de Código ★ Description CVE-2024-46538 : Vulnerabilidad de XSS almacenado en PfSense description: Una vulnerabilidad de cross-site scripting...

CVE-2019-12949

CVE-2019-12949 From Cross Site Scripting Vulnerability to Remote Code Execution in pfSense 2.4.4-p2 and 2.4.4-p3 Information Description: In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trich the authenticated administrator into clicking on a button on a phishing page, an attacker can uplo...

CVE-2022-31814

Download CVE-2022-31814 Este script explota una vulnerabilidad en pfSense para subir un shell, ejecutar un comando y luego eliminar el shell. Requisitos Python 3.x Librería requests Instalación 1. Clone el repositorio o descargue el script. 2. Instale las librerías Python requeridas: root@kitploi...

CVE-2025-69690-CVE-2025-69691

🔐 CVE-2025-69690 & CVE-2025-69691 Authenticated Remote Code Execution in Netgate pfSense Community Edition 📋 Summary...

CVE-2018-11510

Un par de exploits para CVE-2018-11510 de Kyle Lovett @SquirrelBuddha y yo mismo Matthew Fulton/@haqur. Aprovecha una inyección de comandos no autenticada para obtener una shell root. El módulo de metasploit tiene un payload separado incluido en el repositorio. Veré si puedo incluirlos mediante u...

CVE-2023-27100

CVE-2023-27100 - pfSense Umgehung des Anti-Brute-Force-Schutzes Problembeschreibung Das Authentifizierungssystem versucht, informativ zu sein und zusätzliche Informationen zusammen mit IP-Adressen auszugeben, um vollständig zu identifizieren, von wo aus sich ein Benutzer anmeldet, wenn er sich üb...

CVE-2026-67189

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...