CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

CVE-2026-106170

An Uncaught Exception vulnerability CWE-248 vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests...

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker...

CVE-2025-57739

An improper neutralization of special elements used in an SQL Command "SQL Injection" vulnerability CWE-89 vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or command...

CVE-2019-16724

Vulnerability Description File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter. This exploit was tested on windows 7 Home. It will certainly break when on other...

ASUS-AiCloud-RCE

Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...

CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server Local Privilege Escalation CARPE DIEM Description CVE-2019-0211 is a local privilege escalation vulnerability affecting Apache HTTP Server between versions 2.4.17 and 2.4.38 using modprefork and modphp or PHP-FPM. The vulnerability allows an attacker with a shel...

CVE-2023-38545

CVE-2023-38545: Curl Vulnerability Proof of Concept This repository contains a Proof of Concept PoC designed to test systems for the CVE-2023-38545 vulnerability. The vulnerability affects the curl utility, specifically versions between 7.69.0 and 8.3.1, and is related to the handling of HTTP...

CVE-2026-106172

Fortinet FortiSandbox and FortiSandbox Cloud products are vulnerable to a use of hard-coded cryptographic key (CWE-321). This vulnerability affects FortiSandbox versions 5.2.0 through 5.2.1 , 5.0.0 through 5.0.6 , and all 4.4 versions , as well as FortiSandbox Cloud versions 5.2.0 through 5.2.1 ,...

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker...

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker...

CVE-2025-57739

An SQL Injection vulnerability (CWE-89) exists in Fortinet FortiMail versions 7.6.0 through 7.6.3 , 7.4.0 through 7.4.5 , and 7.2.0 through 7.2.8 . The flaw is caused by an improper neutralization of special elements used in an SQL command. This allows an authenticated attacker to execute unautho...

CVE-2026-106170

An Uncaught Exception vulnerability (CWE-248) exists in Fortinet FortiSandbox versions 5.2.0 through 5.2.1 , 5.0.0 through 5.0.6 , and all versions of 4.4 . A privileged attacker can use crafted HTTP requests to persistently deny access to the GUI and CLI . No specific exploit details or remediat...

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 allows an attacker to execute unauthorized code or commands by sending specially crafted HTTP requests . The vulnerability is associated with CWE-862 and has a LOW base severity score of 3.8. No specific exploit details or remediat...

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

CVE-2018-5354

CVE-2018-5354 ANIXIS Password Reset Client Privilege Escalation/RCE Information Vendor: ANIXIS Product: ANIXIS Password Reset Client Versions Affected: Before version 3.22 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The custom GINA/CP module in...

CVE-2026-61642

Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding. HTTP header parsing src/HttpHeader.cc accepted the bare Transfer-Encoding: identity...

sickrageWTF

Sickrage cleartext github credentials CVE-2018-9160 1. About Exploit Title: SickRage Clear-Text Credentials in HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link:...

CVE-2019-10092

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...