CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheckvalidate endpoint with reverse shell payload delivery. Here’s a GitHub-style writeup for your project, including a clean and concise summary, a usage guide, and context on how it fits...

cve-2022-42475

FortiOS SSL-VPN buffer overflow vulnerability cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN Vulnerability 🔍 Overview CVE-2018-13379 is a critical path traversal vulnerability in Fortinet FortiOS SSL VPN. It allows attackers to download VPN web session files and extract sensitive information. Impact: Information disclosure usernames, session tokens...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Description CVE-2022-42475 is a heap-based buffer overflow vulnerability in the FortiOS SSL VPN service that allows unauthenticated attackers to remotely execute arbitrary code RCE via specially crafted HTTP requests...

fortinet-cve-2024-50562

Fortinet SSL-VPN Session Reuse Vulnerability CVE-2024-50562 Professional, permission-only scanner that proves whether a FortiGate invalidates session cookies after logout. A positive finding confirms CVE-2024-50562 — an Insufficient Session Expiration flaw CWE-613 that lets an attacker replay a...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview Field| Value ---|--- CVE| CVE-2024-21762 Advisory| FG-IR-24-015 CVSS| 9.8 Critical CWE| CWE-787 Out-of-bounds Write CISA KEV| Yes - actively exploited in the wild Attack Vector| Network unauthenticated Affected Component| sslvpnd SSL V...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Herramienta de explotación, Puede usar esta herramienta para verificar la vulnerabilidad en su FortiGate SSL-VPN. Esta vulnerabilidad afecta las siguientes versiones: • FortiOS 6.0 - 6.0.0 a 6.0.4 • FortiOS 5.6 - 5.6.3 a 5.6.7 • FortiOS 5.4 - 5.4.6 a 5.4.12...

VulnCheck KEV: CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

SSL-VPN Symlink Persistence Patch Bypass

...

CVE-2022-35842

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS...

EUVD-2025-34237

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

CVE-2025-25252

FortiOS SSL VPN is vulnerable to an Insufficient Session Expiration [CWE-613] flaw in versions 7.6.0 through 7.6.2 , 7.4.0 through 7.4.6 , 7.2.0 through 7.2.10 , 7.0.0 through 7.0.16 , and all versions 6.4 . The root cause is an incorrect session duration that allows a remote attacker to re-open ...

CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

PT-2025-41947

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.2 FortiOS versions 7.4.0 through 7.4.6 FortiOS versions 7.2.0 through 7.2.10 FortiOS versions 7.0.0 through 7.0.16 FortiOS version 6.4 Description An insufficient session expiration issue exists in FortiOS SS...

Insufficient Session Expiration in SSLVPN using SAML authentication

...

EUVD-2017-16713

Malware in sbrugna...

EUVD-2019-7961

Malware in sbrugna...

EUVD-2025-17805

Malicious code in bioql PyPI...

EUVD-2022-38715

Malicious code in bioql PyPI...

FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse

!/usr/bin/env python3 """ Exploit Title: FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse Date: 2025-06-15 Exploit Author: Shahid Parvez Hakim BugB Technologies Vendor Homepage: https://www.fortinet.com Software Link: https://www.fortinet.com/products/secure-sd-wan/fortigate...