CVE-2019-7482

Multiple Vulnerabilities in SonicWall SMA/SRA Appliances CVE-2019-7481, CVE-2019-7482,CVE-2019-7483, CVE-2019-7484, CVE-2019-7485, CVE-2019-7486 First Published: 26 Feb 2020 14:00 GMT Status: Developing Last Updated: 26 Feb 2020 14:00 GMT CVSS Score: 9.8 Summary On 18 Dec 2019, SonicWall CSIRT...

CVE-2020-5142-POC-MB

CVE-2020-5142-POC-MB Reflected XSS found by Burp Suite in several locations on SonicOS 7.0 Sonicwall NSA device...

VisualDoor

VisualDoor SonicWall SSL-VPN Exploit, as used by Phineas Fisher to hack Cayman Trust Bank and Hacking Team. Unauthenticated, gives you a "nobody" shell. Getting root is an exercise for the user. For details see: https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/...

sonicwall-audit-toolkit

SonicWall Security Audit Toolkit Automated security assessment framework for SonicWall appliances. For authorized penetration testing engagements only. Quick Start Install dependencies pip install -r requirements.txt Run all modules against a target python3 sonicwallaudit.py --target 192.168.1.1...

CVE-2026-15409-15410-Framework

1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root Privesc Exploit Framework & Safe Detection Tool ! Ethical Use Only - Authorized Tests This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized acces...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

SonicWall SonicOS 7.0 - Open Redirect

SonicWall SonicOS 7.0 contains an open redirect vulnerability. The values of the Host headers are implicitly set as trusted. An attacker can spoof a particular host header, allowing the attacker to render arbitrary links, obtain sensitive information, modify data, execute unauthorized operations...

sonicwall-cve-2019-7482

sonicwall cve-2019-7482 desbordamiento basado en pila...

CVE-2026-15409

🚀 CVE-2026-15409 – RCE en Erlang en SonicWall SMA 1000 a través del proxy WebSocket Exploit de prueba de concepto para CVE-2026-15409 – ejecución remota de código no autenticada en los dispositivos de la serie SonicWall SMA 1000 a través del protocolo de distribución de Erlang tunelizado sobre...

VisualDoor

VisualDoor Exploit de SonicWall SSL-VPN, utilizado por Phineas Fisher para hackear el Cayman Trust Bank y Hacking Team. No autenticado, te da un shell de 'nobody'. Obtener root es un ejercicio para el usuario. Para más detalles ver:...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC para SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 Consulta nuestra entrada de blog para obtener detalles técnicos https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC en acción python...

CVE-2026-83548-checker

SonicWall SMA 1000 — Detector de exposición CVE-2026-83548 / CVE-2026-83549 Un script de detección no intrusivo para los dispositivos de la serie SonicWall Secure Mobile Access SMA 1000 afectados por CVE-2026-83548 SSRF previo a la autenticación en la interfaz Work Place, CVSS 10.0 y CVE-2026-835...

CVE-2021-20038-SonicWall-RCE

SonicWallSSL-VPNRCE CVE-2021-20038 Argumentos de línea de comandos -h Ver ayuda -u Especificar url -f Especificar el archivo file El formato dentro del archivo file debe incluir el encabezado http/https...

SonicWall GMS and Analytics - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — Análisis de Vulnerabilidad en SonicWall SMA1000 Un proyecto de ciberseguridad que explora una vulnerabilidad del mundo real, su impacto potencial y cómo los equipos de seguridad pueden detectar, corregir y verificar el problema. Descripción General del Proyecto Este proyecto form...

CVE-2026-4112

SonicWall SMA 8200v: Escalada de Privilegios mediante Inyección SQL Ciega entre Parámetros Firmware: 12.5.0-02283 Hotfix de Plataforma sobre la Base 12.5.0-02002 Aviso de SonicWall 1. Resumen Una vulnerabilidad de inyección SQL ciega posterior a la autenticación en la consola de gestión de...

cve-2024-53703-poc

cve-2024-53703-poc POC for exploiting CVE-2024-53703, a stack-based buffer overflow in SonicWall SMA modhttprp.so...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...

CVE-2025-40602

CVE-2025-40602 📌 Overview CVE-2025-40602 is a local privilege escalation vulnerability affecting SonicWall Secure Mobile Access SMA 1000 series appliances. The flaw exists in the Appliance Management Console AMC due to insufficient authorization checks , allowing an authenticated low-privileged...

patch-CVE-2026-06555

Parche: CVE-2026-06555 Detalles de la vulnerabilidad CVE : CVE-2026-06555 Producto : SonicWall SMA Descripción : Path traversal Gravedad : Alta Estado del parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche| 2026-02-25 Estado| desplegado Desplegado en| Producción Validado por| Equipo SecOps...