37 matches found
CVE-2025-4660
説明 CVE-2025-4660(Forescout SecureConnector RCE)の PoC forescoutredirect.py これはエクスプロイト本体であり、エージェントを攻撃者が制御する特定の IP アドレスにリダイレクトできます forescoutc2.py ForeScout SecureConnector の言語で通信するシンプルな C2 実装です...
CVE-2024-9950-PoC
CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07 詳細 私のブログ 情報 脆弱性: セキュリティ設定が不十分なディレクトリでの一時スクリプトの作成 深刻度: 中~高 ベクター: ローカルWindows OSマシン 攻撃の複雑さ: 低 必要な権限: 低 カテゴリ: ローカル権限昇格 アプリケーション 影響を受けるコンポーネント: Windowsエージェント - Forescout eyeSightおよびeyeControlのSecureConnector 影響を受けるバージョン: Forescout SecureConnector ...
EUVD-2024-20325
Malicious code in bioql PyPI...
EUVD-2024-50357
Malicious code in bioql PyPI...
EUVD-2024-50232
Malicious code in bioql PyPI...
CVE-2024-22795
Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component...
CVE-2024-9949
Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application...
ForeScout SecureConnector 安全漏洞
ForeScout SecureConnector is a network security software from ForeScout, Inc. that authenticates machines attempting to join a network. A security vulnerability exists in the ForeScout SecureConnector Windows agent that stems from improper access control of named pipes, which could lead to remote...
PT-2025-21022
Name of the Vulnerable Software and Affected Versions Forescout SecureConnector versions 11.1.02.1019 through 11.3.6 Description A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible t...
Forescout SecureConnector 11.3.07 Privilege Escalation
Forescout SecureConnector versions 11.3.07 and below privilege escalation proof of concept that makes use of an insecure permissions vulnerability...
Exploit for CVE-2024-9950
CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07...
CVE-2024-9950
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
CVE-2024-9950
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
CVE-2024-9950
CVE-2024-9950 affects Forescout SecureConnector on Windows (version 11.3.07.0109 and earlier). The root cause is an insecure temporary directory that allows an unauthenticated user to modify compliance scripts, enabling local privilege escalation. The CVE is supported by published PoC/example exp...
CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
ForeScout SecureConnector 安全漏洞
ForeScout SecureConnector is a network security software from ForeScout, Inc. that authenticates machines attempting to join a network. A security vulnerability exists in ForeScout SecureConnector version 11.3.07.0109, which stems from an insecure temporary directory causing an unauthenticated us...
CVE-2024-9949
Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application...
CVE-2024-9949
Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application...
CVE-2024-9949 Denial of Service in Forescout SecureConnector
Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application...