263 matches found
Sophos-Vulnerability
Analysis of Vulnerability CVE-2022-1040 Sophos RCE In the research group Toasec, dedicated to offensive cybersecurity, we took on the task of analyzing this vulnerability in Sophos firewalls. This vulnerability, like many others, can be reported and found if you know how to search on Twitter, whe...
CVE-2022-1040
CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin portal auth bypass and rce all in one script; The vulnerability affects Sophos Firewall v18.5 MR3 18.5.3 and older Mitigation: update to latest version asap https://support.sophos.com/support/s/article/KB-000043853?language=enUS to avoid...
cve-2022-1040
Environment In Python Environment3.10 It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...
Sophos Firewall <= 19.0 MR1 - Remote Code Execution
Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...
CVE-2022-0331
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older...
The vulnerability of the SMTP proxy network interface component of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the SMTP proxy layer of Sophos Firewall formerly known as Sophos XG Firewall relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Secure PDF eXchange (SPX) function of the Sophos Firewall (formerly known as Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the Secure PDF eXchange SPX function of the Sophos Firewall previously called Sophos XG Firewall exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability can allow a remote attacker t...
The vulnerability of the Up2Date component of Sophos Firewall’s network interfaces (previously called Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the Up2Date component of the Sophos Firewall formerly known as Sophos XG Firewall is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the WebAdmin interface of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.
The vulnerability of the WebAdmin interface of Sophos Firewall formerly Sophos XG Firewall relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EUVD-2021-12178
Malware in sbrugna...
EUVD-2021-12179
Malware in sbrugna...
EUVD-2024-54805
Malicious code in bioql PyPI...
EUVD-2024-51076
Malicious code in bioql PyPI...
EUVD-2024-54804
Malicious code in bioql PyPI...
EUVD-2025-22086
Malicious code in bioql PyPI...
EUVD-2022-43066
Malicious code in bioql PyPI...
EUVD-2023-57852
Malicious code in bioql PyPI...
EUVD-2025-22085
Malicious code in bioql PyPI...