110 matches found
sophucked
sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth. Implemented this quickly as it was needed to unify some threat magnets. Example Use: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + starting handler on port 80 + Sending callback to x.x.x.x:80 + connection from x.x.x.x + pop t...
CVE-2020-25223
CVE-2020-25223 A PoC script for testing CVE-2020-25223 against an affected Sophos UTM. Given an IP address, the script attempts to download a copy of the devices /etc/shadow file. Original research: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...
CVE-2026-118633
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM all versions after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and th...
EUVD-2026-112361
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM all versions after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and th...
CVE-2026-118633
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM all versions after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and th...
CVE-2026-118633
A path traversal vulnerability exists in Sophos UTM (all versions), allowing a remote unauthenticated attacker to achieve arbitrary code execution as root . This is possible by winning a race condition through sustained repeated attacks lasting several minutes when the email proxy is active with ...
PT-2026-129128
Name of the Vulnerable Software and Affected Versions Sophos UTM affected versions not specified Description A path traversal issue allows a remote unauthenticated attacker to execute arbitrary code as root. This occurs when the email proxy is used with scanning enabled and the attacker...
CVE-2026-118633: Path Traversal: '.../...//'
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM all versions after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and th...
Sophos UTM User Portal - Login Panel Detection
Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client access and self-service. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client a.""" from...
CVE-2022-0652
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710...
EUVD-2021-12184
Malware in sbrugna...
EUVD-2014-2573
Malware in sbrugna...
EUVD-2016-8295
Malware in sbrugna...
EUVD-2016-8253
Malware in sbrugna...
EUVD-2013-5766
Malware in sbrugna...
EUVD-2016-3152
Malware in sbrugna...
EUVD-2017-8193
Malware in sbrugna...
EUVD-2022-15746
Malicious code in bioql PyPI...