45 matches found
CVE-2025-4660
Description A PoC for CVE-2025-4660, Forescout SecureConnector RCE forescoutredirect.py This is the exploit itself where you can redirect an agent to a specific IP address under the attackers control forescoutc2.py A simple C2 implementation that speaks the ForeScout SecureConnector language...
CVE-2024-9950-PoC
CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07 Detail My Blog Info Vulnerability: Creation of Temporary Script in Directory with Insecure Permissions Severity: Medium to High Vector: Local Windows OS machine Attack Complexity: Low Privileges Required: Low Categories: Local Privilege...
CVE-2025-13833
A vulnerability exists in SecureConnector for Windows involving insecure TLS fingerprint validation . When the "Additional Appliance Connections" setting is enabled and the configuration file contains more than three trusted-server entries, the agent may accept sessions with malicious servers if ...
CVE-2025-13833 Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution
A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...
EUVD-2024-50232
Malicious code in bioql PyPI...
EUVD-2024-20325
Malicious code in bioql PyPI...
EUVD-2024-50357
Malicious code in bioql PyPI...
CVE-2024-22795
Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component...
CVE-2024-9949
Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application...
PT-2025-21022
Name of the Vulnerable Software and Affected Versions Forescout SecureConnector versions 11.1.02.1019 through 11.3.6 Description A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible t...
ForeScout SecureConnector security vulnerabilities
ForeScout SecureConnector is a network security software from ForeScout, Inc. that authenticates machines attempting to join a network. A security vulnerability exists in the ForeScout SecureConnector Windows agent that stems from improper access control of named pipes, which could lead to remote...
Forescout SecureConnector 11.3.07 Privilege Escalation
Forescout SecureConnector versions 11.3.07 and below privilege escalation proof of concept that makes use of an insecure permissions vulnerability...
Exploit for CVE-2024-9950
CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07...
CVE-2024-9950
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
CVE-2024-9950
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
CVE-2024-9950
CVE-2024-9950 affects Forescout SecureConnector on Windows (version 11.3.07.0109 and earlier). The root cause is an insecure temporary directory that allows an unauthenticated user to modify compliance scripts, enabling local privilege escalation. The CVE is supported by published PoC/example exp...
CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...
PT-2025-3737
Name of the Vulnerable Software and Affected Versions Forescout SecureConnector version 11.3.07.0109 Description A vulnerability in Forescout SecureConnector allows unauthenticated users to modify compliance scripts due to an insecure temporary directory. This issue enables unauthorized...
CVE-2024-9950: Creation of Temporary File in Directory with Insecure Permissions
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...