FortiWeb-CVE-2025-52970-Authentication-Bypass

🚨 FortiWeb Authentication Bypass → Remote Code Execution 📌 Overview This repository demonstrates an authentication bypass in FortiWeb that can be chained to achieve Remote Code Execution RCE. The exploit leverages a vulnerable endpoint to inject SQL payloads, upload a webshell, and execute comman...

vulnerabilities in Fortinet FortiSandbox

Fortinet has identified vulnerabilities in FortiSandbox. The vulnerability with identifier CVE-2026-107656 has a CVSS score of 9.6 and involves an authentication bypass in the web management interface of FortiSandbox. An unauthorized malicious actor can bypass the authentication process through...

Rocket.Chat: API Keys Hardcoded in Github repository

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: API Keys is ha...