21 matches found
cve-2024-23113-test-env
CVE-2024-23113 FortiOS テスト環境 シミュレートされた脆弱なFortiOSインスタンスに対してCVE-2024-23113 Nucleiテンプレートを検証するためのDockerベースのテスト環境です。 🔍 概要 この環境は、CVE-2024-23113 Nucleiテンプレートの検出機能をテストするために、脆弱なFortiOS HTTPインターフェースをシミュレートします。ログインページ、APIエンドポイント、適切なバージョン情報を含む、現実的なFortiOSレスポンスを提供します。 🚀 クイックスタート 前提条件 Docker Docker Compose...
CVE-2024-23113
CVE-2024-23113 This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE. How To Use 1. Create a "clients.txt" file, and import a list of all your clients IP addresses. 2. Create a "vul.txt" file. This will be used to export the scripts findings. 3. Run...
ROOT-OS-UBUNTU-2404-CVE-2026-23113 CVE-2026-23113 in linux - Patched by Root
Root has patched CVE-2026-23113 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2026-23113
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-06-01 18:00:00+00:00| seen|...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
CVE-2024-23113 FortiOS Test Environment A Docker-based test e...
CVE-2022-23113
Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files...
CVE-2025-3881
The CVE-2025-3881 entry concerns the eCharge Hardy Barth cPH2 charging stations. A vulnerability in the ntp parameter handling of the /check_req.php endpoint allows command injection, due to insufficient validation of a user-supplied string used in a system call. This can enable remote code execu...
CVE-2025-23113
An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a CSV file containing a list of alert configuration. An attacker can send the victim a CSV file containing an HTML injection payload in the alert-title. Once...
CVE-2025-23113
creationtimestamp| type| source ---|---|--- 2025-01-10 22:04:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1249 2025-01-10 22:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113806369662260579 2025-01-10 22:16:30+00:00| seen|...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discover...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
CVE-2024-23113 The script is designed to detect CVE-2024-2311...
CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Fortinet products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-23113 CVSS score: 9.8, relates ...
CVE-2024-23113
CVE-2024-23113 is a format-string vulnerability in Fortinet FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager. An attacker can trigger remote code execution by sending specially crafted packets that influence format-string processing in affected components. Affected versions include FortiOS 7...
February Fortinet Advisory: everything you need to know
Fortinet offers guidance to detect and mitigate CVE-2024-21762 and CVE-2024-23113, critical RCE vulnerabilities in FortiOS and FortiProxy, including guidance that organizations should patch urgently...
CVE-2024-23113
creationtimestamp| type| source ---|---|--- 2024-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1225 2024-02-09 08:40:20+00:00| seen| https://www.cert.at/de/warnungen/2024/2/kritische-sicherheitslucken-in-fortinet-fortios-updates-verfugbar 2024-02-09 10:14:28+00:00|...
Fortinet Fortigate Format String Bug in fgfmd (FG-IR-24-029)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-029 advisory. - A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0...
CVE-2022-23113
creationtimestamp| type| source ---|---|--- 2022-01-12 22:17:28+00:00| seen| https://t.me/cibsecurity/35363...
CVE-2022-23113
CVE-2022-23113 affects Jenkins Publish Over SSH Plugin 1.22 and earlier. The issue is a path traversal vulnerability caused by insufficient validation of the file name, allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files. Connected sources corrob...
CVE-2022-23113
Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files...