Sophos Firewall <= 19.0 MR1 - Remote Code Execution

Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...

CVE-2022-0331

An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older...

The vulnerability of the WebAdmin interface of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.

The vulnerability of the WebAdmin interface of Sophos Firewall formerly Sophos XG Firewall relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

EUVD-2021-12178

Malware in sbrugna...

EUVD-2021-12179

Malware in sbrugna...

EUVD-2022-15498

Malicious code in bioql PyPI...

EUVD-2022-43068

Malicious code in bioql PyPI...

EUVD-2022-43055

Malicious code in bioql PyPI...

EUVD-2025-22084

Malicious code in bioql PyPI...

EUVD-2025-22086

Malicious code in bioql PyPI...

EUVD-2024-51077

Malicious code in bioql PyPI...

EUVD-2025-22085

Malicious code in bioql PyPI...

EUVD-2022-43067

Malicious code in bioql PyPI...

EUVD-2022-43066

Malicious code in bioql PyPI...

EUVD-2024-54805

Malicious code in bioql PyPI...

EUVD-2023-57852

Malicious code in bioql PyPI...

EUVD-2022-43070

Malicious code in bioql PyPI...

EUVD-2022-42637

Malicious code in bioql PyPI...

EUVD-2024-51076

Malicious code in bioql PyPI...

EUVD-2024-54804

Malicious code in bioql PyPI...