927 matches found
pfSense Firewall Cross-Site Request Forgery Vulnerability
pfSense is a free, open-source customized version of FreeBSD designed for use as a firewall and router. pfSense suffers from a cross-site request forgery vulnerability. diagbackup.php does not validate all functions sufficiently. Allows an attacker to upload malicious files...
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community...
pfSense authenticated graph status RCE
pfSense, a free BSD based open source firewall distribution, version use exploit/unix/http/pfsense/graphinjectionexec msf undefinedgraphinjectionexec show actions ...actions... msf undefinedgraphinjectionexec set ACTION msf undefinedgraphinjectionexec show options ...show and set options... msf...
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities
, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community Edition = 2.2.6 PDF:...
pfSense Community Edition 2.2.6 - Multiple Vulnerabilities
Exploit for php platform in category web applications PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community Edition ' s...
PfSense Community Edition 2.2.6 CSRF / XSS / Command Injection
, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community Edition = 2.2.6 PDF:...
pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery
Exploit for php platform in category web applications Exploit Title: pfSense Firewall Stop NTPD service: Restart NTPD service: POC: input type="hidden" na...
pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery
pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery Exploit Title: pfSense Firewall Stop NTPD service: Restart NTPD service: POC: input type="submit" value...
pfSense <= 2.2.5 - Config File CSRF漏洞
No description provided by source...
doc.pfsense.org XSS vulnerability
Vulnerable URL: https://doc.pfsense.org/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:36 GMT Vulnerability type:| XSS Vulnerability...
pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery
Exploit for php platform in category web applications function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "https://192.168.0.103/diagbackup.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...
pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery
pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "https://192.168.0.103/diagbackup.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...
pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery
function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "https://192.168.0.103/diagbackup.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5";...
pfSense Firewall 2.2.5 Cross Site Request Forgery
function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "https://192.168.0.103/diagbackup.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5";...
pfSense <= 2.2.5 Wizard XML Directory Traversal Vulnerability - Active Check
pfSense is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pfsense:pfsense";...
pfSense Detection (HTTP)
HTTP based detection of pfSense. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.806807";...
PFSense 2.2.5 - Directory Traversal Vulnerability
Exploit for php platform in category web applications Title : PFSense 12 1 LFI example Lfi example on step1submitphpaction;/stepsubmitphpa...
pfSense 2.2.5 - Directory Traversal
pfSense 2.2.5 - Directory Traversal Title : PFSense 12 1 LFI example Lfi example on step1submitphpaction; /etc/passwd /pfsensewi...