Bishop Fox Team X

6 exploits Active since Mar 2022
CVE-2023-0656 NOMISEC HIGH WORKING POC
SonicOS < 7.0.1-5111 - Unauthenticated Denial of Service via Stack-based Buffer Overflow
A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
19 stars
CVSS 7.5
CVE-2022-22274 NOMISEC CRITICAL WORKING POC
SonicOS < 7.0.1-5050 and SonicOSv < 6.5.4.4-44v-21-1452 - Unauthenticated Stack-based Buffer Overflow via HTTP Request
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.
19 stars
CVSS 9.8
CVE-2026-28318 GITHUB HIGH python SCANNER
SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update
CVSS 7.5
CVE-2026-34908 GITHUB CRITICAL python SCANNER
Ubiquiti INC UniFi OS Server - Improper Access Control
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
CVSS 10.0
CVE-2026-0265 GITHUB HIGH python SCANNER
Palo Alto Networks PAN-OS Unauthenticated Authentication Bypass via Cloud Authentication Service
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used. The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
CVE-2026-25075 NOMISEC HIGH SCANNER
strongSwan 4.5.0-6.0.4 - Unauthenticated Denial of Service via EAP-TTLS AVP Parser Integer Underflow
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.
CVSS 7.5