cve-2024-21762-checker

FortiGate cve-2024-21762-checker 此脚本用于检测基于CVE-2024-21762的FortiGate SSL VPN漏洞。它使用Shodan查找易受攻击的设备，并测试其漏洞状态。 特点 使用Shodan API查找在10443端口运行SSL VPN的FortiGate设备。 检查设备的漏洞状态。 灵活的Shodan查询。 显示结果并附带组织、国家等附加信息。 要求 Python 3.x Shodan API 密钥 安装 1. 克隆此仓库： root@kitploit: git clone...

CVE-2024-21762-Checker

CVE-2024-21762 检查器 该脚本对CVE-2024-21762（Fortinet SSL VPN远程代码执行漏洞）执行漏洞扫描。它通过发送特定请求并分析响应，检查给定服务器是否受此CVE影响。 更多信息，请参阅此Bishop Fox博客文章 公开漏洞日期：2024/02/28 受影响版本：FortiOS 6.0 至 7.4.2 FortiOS 版本| 受影响版本| 建议操作 ---|---|--- FortiOS 7.6| 不受影响| 不适用 FortiOS 7.4| 7.4.0 至 7.4.2| 升级至 7.4.3 或更高版本 FortiOS 7.2| 7.2.0 至...

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check 检查你的防火墙是否易受 CVE-2024-21762（无需认证的远程代码执行）攻击 有关该漏洞的更多信息：https://cuty.io/TKyfFh 订阅或加入我的社交媒体获取更多黑客相关资讯！！ 学习如何检测漏洞并保护你的企业 YouTube 视频：https://cuty.io/1hkzLCN 前提条件 克隆 GitHub 仓库 root@kitploit: git clone...

CVE-2024-21762

使用方法: python3 exploit.py --target 192.168.1.1:443 --callback-ip YOURIP --callback-port 8080...

cve-2024-21762-check

Comprobación de CVE-2024-21762 Detecte de forma segura si una VPN SSL de FortiGate es vulnerable a CVE-2024-21762. Para más información, consulte esta publicación del blog de Bishop Fox Uso root@kitploit: python3 check-cve-2024-21762.py En la mayoría de los casos, el script mostrará "Vulnerable" ...

CVE-2024-21762

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting...

Fortinet FortiOS and FortiProxy Remote Code Execution (CVE-2024-21762)

Binary data fortiosandfortiproxyCVE-2024-21762.nbin...

Fortinet FortiOS Out-Of-Bounds Write

CVE-2024-21762 out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability Vulnerability ===== FortiGate released a version update in February, fixing multiple medium- and high-risk vulnerabilities. One of the severe-level vulnerabilities is an unauthorized out-of-bounds write...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Chequea si t...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762 out-of-bounds write in Fortinet FortiOS CVE-20...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762 Check Safely detect whether a FortiGate SSL VPN...

Fortinet FortiProxy Out-of-bound Write in sslvpnd (FG-IR-24-015)

The version of FortiProxy installed on the remote host affected by an out-of-bounds write vulnerability in sslvpnd that can allow an attacker to execute unauthorized code or commands via specifically crafted requests. Note that Nessus has not tested for this issue but has instead relied only on t...

February Fortinet Advisory: everything you need to know

Fortinet offers guidance to detect and mitigate CVE-2024-21762 and CVE-2024-23113, critical RCE vulnerabilities in FortiOS and FortiProxy, including guidance that organizations should patch urgently...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significan...

CVE-2024-21762

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0...

CVE-2024-21762

CVE-2024-21762 is an unauthorized out-of-bounds write flaw in Fortinet FortiOS FortiProxy SSL VPN, exploitable via crafted HTTP requests to the SSL VPN interface (notably /remote/hostcheck_validate). Supported disclosures show impact as remote code execution with potential full device compromise....

Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation

Fortinet has disclosed a new critical security flaw in FortiOS SSL VPN that it said is likely being exploited in the wild. The vulnerability, CVE-2024-21762 CVSS score: 9.6, allows for the execution of arbitrary code and commands. "A out-of-bounds write vulnerability CWE-787 in FortiOS may allow ...

CVE-2024-21762

creationtimestamp| type| source ---|---|--- 2024-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1225 2024-02-09 06:40:49+00:00| exploited| https://t.me/thehackernews/4526 2024-02-09 06:59:47+00:00| exploited| https://t.me/KomunitiSiber/1466 2024-02-09 07:19:01+00:00...