CVE-2024-23113

CVE-2024-23113 이 스크립트는 FortiGate FGFM 서비스FortiGate와 FortiManager 간 프로토콜에서 TCP 포트 541을 통해 발생하는 포맷 문자열 취약점인 CVE-2024-23113을 탐지하도록 설계되었습니다. 이 취약점은 공격자가 포맷 문자열을 제어할 수 있어 원격 코드 실행RCE 또는 기타 의도치 않은 동작을 유발할 수 있기 때문에 발생합니다. FGFM 서비스는 FortiGate 장치와 FortiManager 간의 구성 관리를 위한 통신을 허용하며, 패치되지 않은 버전은 입력 처리가 부적절...

CVE-2024-23113

CVE-2024-23113 이 스크립트는 FortiGate FGFM 서비스FortiGate에서 FortiManager로의 프로토콜의 TCP 포트 541에서 실행되는 포맷 문자열 취약점인 CVE-2024-23113을 탐지하도록 설계되었습니다. 이 취약점은 공격자가 포맷 문자열을 제어할 수 있기 때문에 발생하며, 이는 원격 코드 실행RCE 또는 기타 의도하지 않은 동작으로 이어질 수 있습니다. FGFM 서비스는 구성 관리를 위해 FortiGate 장치와 FortiManager 간의 통신을 허용하며, 패치되지 않은 버전은 입력을...

PoC-CVE-2024-23113

고지Disclaimer 이 저장소에 포함된 코드와 자료는 교육, 연구 및 승인된 보안 테스트 목적 으로만 제공됩니다. 금지된 사용 소유자의 명시적인 사전 서면 승인 없이 이 도구/코드를 인프라, 시스템 또는 네트워크에 사용하지 마십시오. 승인되지 않은 스캐닝, 악용 또는 악의적인 활동에 이 자료를 사용하는 것은 전적으로 불법이며 엄격히 금지됩니다. 책임의 한계 이 소프트웨어는 명시적이거나 묵시적인 어떠한 종류의 보증 없이 "있는 그대로" 제공됩니다. 저자/기여자는 이 코드의 사용 또는 수정으로 인해 발생하는 오용, 손해, 데이...

MINI-Q266-FGFM-JC97

Bulletin has no description...

Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy

Disclaimer The code and materials contained in this repository...

CVE-2024-26008

An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...

CVE-2024-26008

An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...

CVE-2024-26008

An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...

CVE-2024-26008

An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...

CVE-2024-26008

An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...

PT-2025-41941

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.4.0 through 7.4.3 and prior to 7.2.7 FortiProxy versions 7.4.0 through 7.4.3 and prior to 7.2.9 FortiPAM versions prior to 1.2.0 FortiSwitchManager versions 7.2.0 through 7.2.3 and 7.0.0 through 7.0.3 Description An improper...

Fortinet多款产品 代码问题漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees from network attacks by combining a variety of detection technologie...

EUVD-2021-19429

Malware in sbrugna...

EUVD-2025-16291

Malicious code in bioql PyPI...

Fortinet FortiOS Out-of-Bounds Read Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An out-of-bounds read vulnerabili...

CVE-2025-47295

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's contr...

CVE-2025-47295

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's contr...

CVE-2025-47295

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's contr...

CVE-2025-47295

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's contr...

CVE-2025-47295

CVE-2025-47295 describes a buffer over-read in Fortinet FortiOS FGFM daemon that could crash FGFM when processing a specially crafted request. Affected FortiOS versions include 7.0.0–7.0.14, 7.2.0–7.2.7, and 7.4.0–7.4.3. The underlying issue is a lack of proper input validation leading to a read ...