CVE-2023-29485

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass network filtering, execute arbitrary code, and obtain sensitive information via DarkLayer Guard threat prevention module. NOTE: Heimdal disputes the validity of this issue arguing that their DNS Security for Endpoint filters DNS traffic on the endpoint by intercepting system-generated DNS requests. The product was not designed to intercept DNS requests from third-party solutions.

• CWE-306

• https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93Exploit, Third Party Advisory
• https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93Exploit, Third Party Advisory

Published

Dec 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29478BiblioCraft before 2.4.6 does not sanitize path-traversal ch…9.8
• CVE-2023-29479Ribose RNP before 0.16.3 may hang when the input is malforme…5.3
• CVE-2023-2948Cross-site Scripting (XSS) - Generic in GitHub repository op…6.1
• CVE-2023-29480Ribose RNP before 0.16.3 sometimes lets secret keys remain u…7.5
• CVE-2023-29483eventlet before 0.35.2, as used in dnspython before 2.6.0, a…7
• CVE-2023-29484In Terminalfour before 8.3.16, misconfigured LDAP users are …6.5
• CVE-2023-29486An issue was discovered in Heimdal Thor agent versions 3.4.2…9.8
• CVE-2023-29487An issue was discovered in Heimdal Thor agent versions 3.4.2…9.1
• CVE-2023-29489An issue was discovered in cPanel before 11.109.9999.116. XS…6.1
• CVE-2023-2949Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2023-29491ncurses before 6.4 20230408, when used by a setuid applicati…7.8
• CVE-2023-29492Novi Survey before 8.9.43676 allows remote attackers to exec…9.8