PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Swarm of Palo Alto PAN-OS vulnerabilities

swarm.ptsecurity.com | research | #vulnerability-research | #cve | #command-injection | #firewall | #palo-alto
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Analysis of four Palo Alto PAN-OS firewall vulnerabilities: authenticated command injection (CVE-2020-2037, CVE-2020-2038), unauthenticated denial of service (CVE-2020-2039) and reflected XSS (CVE-2020-2036) — each able to leak data, disrupt components or expose internal segments.
Published
Collected

Related coverage

research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
vulnerability · netspi.com
CVE-2026-0300 Palo Alto Networks PAN-OS Buffer Overflow Overview & Takeaways
CVE-2026-0300 is a pre-auth buffer overflow in the PAN-OS User-ID Authentication Portal giving unauthenticated root RCE on PA-Series and VM-Series firewalls, already exploited in the wild.
vulnerability · volexity.com
Detecting Compromise of CVE-2024-3400 on Palo Alto Networks GlobalProtect Devices
# Detecting Compromise of CVE-2024-3400 on Palo Alto Networks GlobalProtect Devices May 15, 2024 Volexity Threat Research Last month, Volexity reported on its discovery of zero-day, in-the-wild...
research · swarm.ptsecurity.com
Cisco Hyperflex: How We Got RCE Through Login Form and Other Findings
An assessment of Cisco HyperFlex HX that found three vulnerabilities: command injection in the installer VM (CVE-2021-1497, CVSS 9.8) and the data platform (CVE-2021-1498), plus a file upload flaw (CVE-2021-1499) — including RCE reached through the login form.
research · swarm.ptsecurity.com
Vulnerabilities in Checkpoint ICA Management Tool
Two flaws in Check Point's ICA Management Tool: an argument injection into the cpca process's sendmail invocation, and a shell command injection in the certificate management interface, plus notes on SSL configuration and exposure risks.
research · portswigger.net
Drag and Pwnd: Leverage ASCII characters to exploit VS Code
Control characters like SOH and carriage return, forwarded blindly by node-pty, enable command injection through VS Code run configurations and filenames dropped into terminals on macOS and Ubuntu.
Back