CVE-2024-55591-POC

CVE-2024-55591용 ScaryByte R&D PoC 특정 Fortinet 장치의 치명적인 인증 우회 취약점CVE-2024-55591을 발견하고 악용하기 위한 포괄적인 올인원 Python 기반 Proof of Concept 스크립트입니다. 이 스크립트는 다음과 같은 기능을 제공합니다: 1. 누락된 종속성 자동 설치 2. 선택적으로 nmap을 사용하여 대상 호스트의 열린 포트 스캔 3. 서비스가 Fortinet 장치인지 및 취약한지 확인하는 사전 점검 수행 4. WebSocket 인터페이스를 악용하여 Telnet 유사 C...

CVE-2024-55591-POC

--port 443 --ssl 그런 다음 프롬프트를 사용하세요: FortiOS get system status FortiOS exit 관리자 비밀번호 재설정: python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! 개발자 텔레그램: @chernyzhizn 고지 사항: 이 도구는 교육 및 승인된 테스트 목적으로만 제공됩니다. 4fe5de8 Add full PoC and README for CVE-2024-55591 by @chernyzh...

SECURITY-3314-3315

= SECURITY-3314/SECURITY-3315 완화 조치 이 저장소는 영향을 받는 인스턴스에서 SECURITY-3314 및 SECURITY-3315의 악용을 방지하는 완화 조치를 문서화합니다. == 개요 CLI에 대한 접근을 비활성화해야 합니다. 다음 두 단계를 모두 수행해야 합니다: CLI HTTP 엔드포인트 제거 SSH 포트 비활성화 https://plugins.jenkins.io/sshd/SSH Server Plugin NOTE 리모팅 기반 CLI는...

CVE-2024-23897

CVE-2024-23897 Jenkins RCE 임의 파일 읽기 CVE-2024-23897 사용법: python poc.py http://127.0.0.1:8888/ /etc/passwd 업데이트: Jenkins 2.442, LTS 2.426.3로 업데이트하세요. 해결 방법: 최신 버전으로 업데이트할 수 없는 경우 CLI 액세스를 비활성화하세요. 이렇게 하면 악용 가능성이 완전히 제거됩니다...

CVE-2026-0309

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

EUVD-2026-75255

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309

CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.

PT-2026-89277

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator t...

vulnerabilities in Fortinet FortiWeb

Fortinet has identified vulnerabilities in FortiWeb. The first vulnerability involves improper authentication in several versions of FortiWeb, allowing an unauthorized attacker to access the GUI and CLI interfaces by submitting arbitrary login credentials. This vulnerability also occurs in FortiW...

PT-2026-58009

Name of the Vulnerable Software and Affected Versions 1715-AENTR EtherNet/IP Adapter versions prior to 3.011 Description The 1715-AENTR EtherNet/IP Adapter exposes a network-accessible debug port that lacks proper privilege controls. This allows unauthenticated remote access to intrusive...

PAN-OS: Authenticated Command Injection in CLI

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of...

CVE-2026-8482

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 included, 4.8.0 to 4.8.15 included , 5.0.0 to 5.0.5 included There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the...

EUVD-2026-36148

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface CLI to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access i...

CVE-2026-0273

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI. The security risk posed...

CVE-2026-0272

Technical details for CVE-2026-0272 are not publicly provided in the supplied documents beyond a general description of privilege escalation in PAN-OS CLI. Monitor for updates; no specifics on vulnerable component, affected versions, or fixes are present.

PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface CLI to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access i...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass...