fortinet-cve-2024-50562

Vulnerabilidad de Reutilización de Sesión SSL-VPN de Fortinet CVE-2024-50562 Escáner profesional, solo con permiso que comprueba si un FortiGate invalida las cookies de sesión después del cierre de sesión. Un hallazgo positivo confirma CVE-2024-50562 — una falla de Expiración de Sesión Insuficien...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 漏洞利用工具， 您可以使用此工具检查 FortiGate SSL-VPN 中的漏洞。 此漏洞影响以下版本： • FortiOS 6.0 - 6.0.0 至 6.0.4 • FortiOS 5.6 - 5.6.3 至 5.6.7 • FortiOS 5.4 - 5.4.6 至 5.4.12 https://www.fortinet.com/blog/business-and-technology/fortios-ssl-vulnerability 重要更新 0.7 获取 Fortinet 设备序列号对应的明文凭据。...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Escáner de prueba de concepto dirigido a CVE-2024-21762 en el endpoint /remote/hostcheckvalidate de SSL VPN de FortiOS con entrega de payload de shell inversa. Aquí tienes una redacción estilo GitHub para tu proyecto, que incluye un resumen limpio y conciso, una guía de...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN 漏洞 🔍 概述 CVE-2018-13379 是 Fortinet FortiOS SSL VPN 中的一个严重路径遍历 漏洞。 它允许攻击者下载 VPN Web 会话文件 并提取敏感信息。 影响： 信息泄露（用户名、会话令牌） CVSSv3： 8.6（高危） 利用方式： 远程，无需认证 💻 受影响版本 FortiOS 5.4.6 – 5.4.12 FortiOS 5.6.3 – 5.6.7 FortiOS 6.0.0 – 6.0.4 FortiProxy ≤ 1.2.8 / 2.0.0 🛠️ 此脚本功能...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descripción CVE-2022-42475 es una vulnerabilidad de heap-based buffer overflow en el servicio SSL VPN de FortiOS que permite a atacantes no autenticados ejecutar código arbitrario de forma remota RCE mediante solicitudes...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN 越界写入 概述 字段| 值 ---|--- CVE| CVE-2024-21762 安全公告| FG-IR-24-015 CVSS| 9.8 严重 CWE| CWE-787 越界写入 CISA KEV| 是 - 已在野外被积极利用 攻击向量| 网络 无需认证 受影响组件| sslvpnd SSL VPN 守护进程 描述 FortiOS SSL VPN 中的越界写入漏洞允许远程未认证的攻击者通过特制的 HTTP 请求执行任意代码或命令。该漏洞存在于 sslvpnd 中的 HTTP 分块传输编码解析器内。当守护进程接收到带有...

cve-2022-42475

FortiOS SSL-VPN 缓冲区溢出漏洞 cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 用于利用 Fortinet 的 SSLVPN 守护进程中堆溢出的 POC 代码 说明 这是一个快速而粗糙的 POC，除非你极其幸运，否则很可能无法在任何地方工作。它依赖于版本，并包含一些硬编码的偏移量，这些偏移量很可能因系统而异。 使用方法 python3 cve-2022-42475.py 远程主机 远程端口 本地主机 '命令' python3 cve-2022-42475.py 192.168.10.1 8443...

VulnCheck KEV: CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

SSL-VPN Symlink Persistence Patch Bypass

...

CVE-2022-35842

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS...

EUVD-2025-34237

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

CVE-2025-25252

FortiOS SSL VPN is vulnerable to an Insufficient Session Expiration [CWE-613] flaw in versions 7.6.0 through 7.6.2 , 7.4.0 through 7.4.6 , 7.2.0 through 7.2.10 , 7.0.0 through 7.0.16 , and all versions 6.4 . The root cause is an incorrect session duration that allows a remote attacker to re-open ...

CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

Insufficient Session Expiration in SSLVPN using SAML authentication

...

PT-2025-41947

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.2 FortiOS versions 7.4.0 through 7.4.6 FortiOS versions 7.2.0 through 7.2.10 FortiOS versions 7.0.0 through 7.0.16 FortiOS version 6.4 Description An insufficient session expiration issue exists in FortiOS SS...

EUVD-2019-7961

Malware in sbrugna...

EUVD-2017-16713

Malware in sbrugna...

EUVD-2025-17805

Malicious code in bioql PyPI...

EUVD-2022-38715

Malicious code in bioql PyPI...

FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse

!/usr/bin/env python3 """ Exploit Title: FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse Date: 2025-06-15 Exploit Author: Shahid Parvez Hakim BugB Technologies Vendor Homepage: https://www.fortinet.com Software Link: https://www.fortinet.com/products/secure-sd-wan/fortigate...