sonicwall-cve-2019-7482

sonicwall cve-2019-7482 stack-based overflow...

CVE-2021-20038-SonicWall-RCE

SonicWallSSL-VPNRCE CVE-2021-20038 Command-line parameters -h View help -u Specify url -f Specify file Entries in the file must include the http/https prefix...

SonicWall

Description SonicWall “Virtual Office” SSL-VPN Products ship a ancient version of Bash vulnerable to ShellShock, and are therefore vulnerable to unauthenticated remote code execution as a “nobody” user via the /cgi-bin/jarrewrite.sh URL. How to RCE Reference...

VisualDoor

VisualDoor SonicWall SSL-VPN Exploit, usato da Phineas Fisher per hackerare Cayman Trust Bank e Hacking Team. Non autenticato, ti fornisce una shell "nobody". Ottenere i permessi di root è un esercizio per l'utente. Per i dettagli vedere:...

cve-2024-53703-poc

cve-2024-53703-poc POC per sfruttare CVE-2024-53703, un buffer overflow basato su stack in SonicWall SMA modhttprp.so...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 è una vulnerabilità di escalation locale dei privilegi nella console di gestione dell'appliance AMC degli appliance SonicWall Secure Mobile Access SMA serie 1000. La vulnerabilità deriva da un'autorizzazione insufficiente nell'AMC, che consente a attaccanti remoti...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC für die SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 Technische Details finden Sie in unserem Blogbeitrag. https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Aktion root@kitploit: python...

rapid7-CVE-2026-15409

CVE-2026-15409 Questa repository contiene una proof-of-concept per CVE-2026-15409. Stabilisce l'esecuzione remota di codice senza privilegi di root su SonicWall SMA 1000 implementando il protocollo Erlang atteso da localhost:1050 e instradandolo tramite websocket per la lettura/scrittura di file ...

CVE-2019-7482

Multiple Vulnerabilities in SonicWall SMA/SRA Appliances CVE-2019-7481, CVE-2019-7482,CVE-2019-7483, CVE-2019-7484, CVE-2019-7485, CVE-2019-7486 Pubblicato inizialmente: 26 Feb 2020 14:00 GMT Stato: In sviluppo Ultimo aggiornamento: 26 Feb 2020 14:00 GMT Punteggio CVSS: 9.8 Sommario Il 18 Dic 201...

CVE-2026-15409

🚀 CVE-2026-15409 – RCE em Erlang no SonicWall SMA 1000 via Proxy WebSocket Exploit de Prova de Conceito para o CVE-2026-15409 – execução remota de código não autenticada em appliances da série SonicWall SMA 1000 por meio do protocolo de distribuição Erlang tunelado via WebSocket. 📖 Visão Geral O...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

SonicWall SonicOS 7.0 - Open Redirect

SonicWall SonicOS 7.0 contains an open redirect vulnerability. The values of the Host headers are implicitly set as trusted. An attacker can spoof a particular host header, allowing the attacker to render arbitrary links, obtain sensitive information, modify data, execute unauthorized operations...

SonicWall GMS and Analytics - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...

SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation

SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. id: CVE-2021-20021 info: name: SonicWall Email Security = 10.0.9.x - Unauthenticated Admin Account Creation author: pussycat0x severity: critical...

SonicWall SMA1000 LFI

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. id: CVE-2023-0126 info: name: SonicWall SMA1000 LFI author: tess severity: high description...

CVE-2020-5148

CVE-2020-5148 SonicWall UTM SSO एजेंट में जबरन प्रमाणीकरण SonicWall SSO एजेंट किसी दिए गए IP पते के पीछे के उपयोगकर्ता की पहचान उस वर्कस्टेशन को NetAPI डिफ़ॉल्ट या WMI से जाँचकर करता है। यह NTLM प्रमाणीकरण शुरू करने से पहले वर्कस्टेशन को मान्य नहीं करता, और सत्र के जीवनकाल तक उसी पते पर पोलिंग कर...

CVE-2026-4112

SonicWall SMA 8200v: Privilege Escalation durch Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix auf 12.5.0-02002 Basis SonicWall Advisory 1. Zusammenfassung Eine Blind-SQL-Injection-Schwachstelle nach der Authentifizierung in der Verwaltungskonsole der SonicWall SMA...

CVE-2026-15409-15410-Framework

1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root Privesc Framework di Exploit e Strumento di Rilevamento Sicuro Solo per test di sicurezza autorizzati. ⚖️ Disclaimer Legale e Uso Responsabile Questo strumento è fornito esclusivamente a scopo educativo e per test di...

CVE-2026-15409

🚨 CVE-2026-15409 严重漏洞：SonicWall SMA1000 系列未经认证的 SSRF 影响 SonicWall SMA1000 系列设备的严重服务端请求伪造（SSRF）漏洞。 本仓库记录了该漏洞、受影响产品、技术概述、影响范围、检测指南及修复措施。 📖 概述 CVE-2026-15409 是 SonicWall SMA1000 系列 设备中的一个 严重级别的未经认证的服务端请求伪造（SSRF） 漏洞。 该漏洞允许远程攻击者迫使设备对内部或外部资源发起非预期的 HTTP 请求。根据公开安全公告，该漏洞已在真实攻击中被利用，并可能与其他漏洞串联以实施进一步破坏。 ✨ 要点...

CVE-2025-40602

CVE-2025-40602 📌 Panoramica CVE-2025-40602 è una vulnerabilità di escalation dei privilegi locale che colpisce i dispositivi della serie SonicWall Secure Mobile Access SMA 1000. Il difetto è presente nella Appliance Management Console AMC a causa di controlli di autorizzazione insufficienti , che...