watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC for SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 See our blog post for technical details https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Action root@kitploit: python...

sonicwall-cve-2019-7482

sonicwall cve-2019-7482 stack-based overflow...

CVE-2026-15409-15410-Framework

1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root Privesc Exploit Framework & Safe Detection Tool For authorized security testing only. ⚖️ Legal Disclaimer & Responsible Use This tool is provided for educational and authorized penetration testing purposes only. The...

CVE-2026-15409

🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE via WebSocket Proxy Proof‑of‑Concept exploit for CVE-2026-15409 – unauthenticated remote code execution on SonicWall SMA 1000 series appliances via the Erlang distribution protocol tunneled over WebSocket. 📖 Overview CVE-2026-15409 is a critical...

SonicWall

Description SonicWall “Virtual Office” SSL-VPN Products ship a ancient version of Bash vulnerable to ShellShock, and are therefore vulnerable to unauthenticated remote code execution as a “nobody” user via the /cgi-bin/jarrewrite.sh URL. How to RCE Reference...

CVE-2020-5142-POC-MB

CVE-2020-5142-POC-MB Reflected XSS found by Burp Suite in several locations on SonicOS 7.0 Sonicwall NSA device...

VisualDoor

VisualDoor SonicWall SSL-VPN 익스플로잇, Phineas Fisher가 Cayman Trust Bank와 Hacking Team을 해킹하는 데 사용한 익스플로잇입니다. 인증 없이 "nobody" 셸을 제공합니다. 루트 권한 획득은 사용자의 몫입니다. 자세한 내용은 다음을 참조하십시오: https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/...

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 노출 탐지기 SonicWall Secure Mobile AccessSMA 1000 시리즈 어플라이언스 중 CVE-2026-83548Work Place 인터페이스의 사전 인증 SSRF, CVSS 10.0 및 CVE-2026-83549AMC의 사후 인증 OS 명령 주입, CVSS 7.8의 영향을 받는 기기를 위한 비간섭적non-intrusive 탐지 스크립트 — 인증되지 않은 RCE를 위해 체인으로 연결된 두 가지 활발히 악용되는 제로데...

CVE-2021-20038-SonicWall-RCE

SonicWallSSL-VPNRCE CVE-2021-20038 Command-line parameters -h View help -u Specify url -f Specify file Entries in the file must include the http/https prefix...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 취약점 분석 실제 취약점, 잠재적 영향, 그리고 보안 팀이 문제를 탐지·수정·검증하는 방법을 살펴보는 사이버 보안 프로젝트입니다. 프로젝트 개요 이 프로젝트는 제 사이버 보안 학습 여정의 일부입니다. 저는 SonicWall SMA1000 시스템에 영향을 미치는 치명적인 취약점인 CVE-2026-83548 을 선택했습니다. 이 취약점이 무엇인지, 어떻게 악용될 수 있는지, 조직에 왜 중요한지, 그리고 방어자가 어떻게 대응할 수 있는지 조사했습니다. 이 프로젝트의 목표...

CVE-2019-7482

SonicWall SMA/SRA 어플라이언스의 다중 취약점 CVE-2019-7481, CVE-2019-7482,CVE-2019-7483, CVE-2019-7484, CVE-2019-7485, CVE-2019-7486 최초 게시: 2020년 2월 26일 14:00 GMT 상태: 개발 중 마지막 업데이트: 2020년 2월 26일 14:00 GMT CVSS 점수: 9.8 요약 2019년 12월 18일, SonicWall CSIRT는 SonicWall Secure Mobile Access SMA 어플라이언스에서 취약점을 식별하는 보안...

CVE-2025-40602

CVE-2025-40602 📌 Overview CVE-2025-40602 is a local privilege escalation vulnerability affecting SonicWall Secure Mobile Access SMA 1000 series appliances. The flaw exists in the Appliance Management Console AMC due to insufficient authorization checks , allowing an authenticated low-privileged...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

SonicWall SonicOS 7.0 - Open Redirect

SonicWall SonicOS 7.0 contains an open redirect vulnerability. The values of the Host headers are implicitly set as trusted. An attacker can spoof a particular host header, allowing the attacker to render arbitrary links, obtain sensitive information, modify data, execute unauthorized operations...

SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation

SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. id: CVE-2021-20021 info: name: SonicWall Email Security = 10.0.9.x - Unauthenticated Admin Account Creation author: pussycat0x severity: critical...

SonicWall GMS and Analytics - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...

SonicWall SMA1000 LFI

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. id: CVE-2023-0126 info: name: SonicWall SMA1000 LFI author: tess severity: high description...

CVE-2026-4112

SonicWall SMA 8200v: 교차 매개변수 블라인드 SQL 인젝션을 통한 권한 상승 펌웨어: 12.5.0-02283 12.5.0-02002 베이스의 플랫폼 핫픽스 SonicWall 권고 1. 요약 SonicWall SMA 8200v 관리 콘솔포트 8443의 인증 후 블라인드 SQL 인젝션 취약점으로 인해 인증된 모든 관리자낮은 권한의 읽기 전용 계정 포함가 어플라이언스 구성 파일에서 기본 관리자의 SHA-512 비밀번호 해시를 추출할 수 있습니다. SonicWall은 관리 콘솔 관리자와 운영 체제 root 계정에 동일...

cve-2024-53703-poc

cve-2024-53703-poc POC for exploiting CVE-2024-53703, a stack-based buffer overflow in SonicWall SMA modhttprp.so...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...