CVE-2021-20038-SonicWall-RCE

SonicWallSSL-VPNRCE CVE-2021-20038 Аргументы командной строки: -h просмотреть справку -u указать URL -f указать файл Внутри файла формат должен содержать префикс http/https...

VisualDoor

VisualDoor SonicWall SSL-VPN Exploit — это эксплойт, использованный Финеасом Фишером для взлома Cayman Trust Bank и Hacking Team. Не требует аутентификации, даёт оболочку от пользователя "nobody". Получение root — задача для пользователя. Подробности:...

SonicWall

설명 SonicWall “Virtual Office” SSL-VPN 제품군에는 ShellShock에 취약한 오래된 버전의 Bash가 포함되어 있으며, 따라서 /cgi-bin/jarrewrite.sh URL을 통해 인증되지 않은 원격 코드 실행"nobody" 사용자 권한에 취약합니다. RCE 방법 참조 https://github.com/darrenmartyn/visualdoor https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit...

PT-2025-47902

CVE-2025-13197 - CVE-2022-42363: SonicWall SSL-VPN Cross-Site Request Forgery CSRF CVE ID : CVE-2025-13197 Published : Nov. 22, 2025, 11:15 p.m. | 3 hours, 26 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA...

VulnCheck KEV: CVE-2022-1703

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service DoS attack...

EUVD-2010-2587

Malware in sbrugna...

EUVD-2007-5784

Malware in sbrugna...

EUVD-2007-5785

Malware in sbrugna...

EUVD-2022-27428

Malicious code in bioql PyPI...

EUVD-2022-24988

Malicious code in bioql PyPI...

SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers

Threat actors affiliated with the Akira ransomware group have continued to target SonicWall devices for initial access. Cybersecurity firm Rapid7 said it observed a spike in intrusions involving SonicWall appliances over the past month, particularly following reports about renewed Akira ransomwar...

CVE-2022-22281

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client 32 and 64 bit in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system...

CVE-2022-1703

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service DoS attack...

CVE-2020-5132

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of...

PT-2025-1010

Name of the Vulnerable Software and Affected Versions SonicWall versions prior to 7.1.3-7015 SonicWall versions prior to 8.0.0-8037 SonicOS versions 7.1.x up to 7.1.1-7058 SonicOS versions 7.0.1 and earlier Description An improper authentication issue exists in the SSL VPN authentication mechanis...

SonicWALL SSL-VPN Format String

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SonicWALL SSL-VPN Format String Vulnerability', 'Description' = %q There is a format string vulnerability within the SonicWALL SSL-VPN Appliance ...

CVE-2022-1703

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service DoS attack...

CVE-2022-1703: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service DoS attack...

PT-2022-14057

Name of the Vulnerable Software and Affected Versions SonicWall SSL-VPN SMA100 series affected versions not specified Description The issue is related to the improper neutralization of special elements in the management interface, allowing a remote authenticated attacker to inject OS commands. Th...

CVE-2022-22281

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client 32 and 64 bit in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system...