fortinet-cve-2024-50562

Vulnerabilidad de Reutilización de Sesión SSL-VPN de Fortinet CVE-2024-50562 Escáner profesional, solo con permiso que comprueba si un FortiGate invalida las cookies de sesión después del cierre de sesión. Un hallazgo positivo confirma CVE-2024-50562 — una falla de Expiración de Sesión Insuficien...

fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591 Detección de Comportamiento Vulnerable de Bypass de Autenticación en Fortinet FortiOS Detección en Acción python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \//...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview Field| Value ---|--- CVE| CVE-2024-21762 Advisory| FG-IR-24-015 CVSS| 9.8 Critical CWE| CWE-787 Out-of-bounds Write CISA KEV| Yes - actively exploited in the wild Attack Vector| Network unauthenticated Affected Component| sslvpnd SSL V...

CVE-2022-40684

CVE-2022-40684 Utilities for exploiting vulnerability CVE-2022-40684 FortiOS / FortiProxy / FortiSwitchManager - Authentication bypass on administrative interface...

cve-2024-21762-check

CVE-2024-21762 Check Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762. For more information, see this Bishop Fox blog post Usage python3 check-cve-2024-21762.py In most cases, the script will either output "Vulnerable" or "Patched". It performs minimal verification that t...

cve-2022-42475

FortiOS SSL-VPN buffer overflow vulnerability cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version...

CVE-2018-13379

Usage & Disclaimer This script is a batch detection script for the Fortinet FortiOS Path Traversal Vulnerability CVE-2018-13379. Usage: Python CVE-2018-13379.py url.txt Vulnerability addresses are output to vul.txt Affected Versions: Fortinet FortiOS versions 5.6.3 - 5.6.7 and 6.0.0 - 6.0.4 with...

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 Una prueba de concepto de omisión de autenticación en Fortinet FortiOS Consulta nuestra publicación del blog para obtener detalles técnicos Detección en acción python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html https://fortiguard.com/psirt/FG-IR-18-384 The below versions of FortiOS were vulnerable. FortiOS 5.6.3 to 5.6.7 FortiOS 6.0.0 to 6.0.4 ONLY if the SSL VPN service web-mode or...

patch-CVE-2026-12087

Parche: CVE-2026-12087 Detalles de la vulnerabilidad CVE : CVE-2026-12087 Producto : Fortinet FortiOS Descripción : Desbordamiento de montón en SSL-VPN Severidad : Crítica Estado del parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche| 2026-05-10 Estado| desplegado Desplegado en| Producción...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Explotación Masiva para Fortinet FortiOS SSL VPN Una herramienta para la explotación masiva de la vulnerabilidad CVE-2018-13379 path traversal en Fortinet FortiOS SSL VPN. Permite leer archivos de sesión y extraer inicios de sesión y contraseñas en texto claro. Características...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader Vulnerability - UaF - RCE - JIT Spraying FortiOS, FortiProxy and FortiSwitchManager Authentication Bypass IOC CVE-2022-40684 Introduction The recent FortiOS / FortiProxy / FortiSwitchManager CVE has been exploited in the wild. We would like to provid...

CVE-2025-59718-Fortinet-Poc

CVEs: CVE-2025-59718 / CVE-2025-59719 Fortinet PoC Tool for detecting vulnerabilities associated with CVE-2025-59718 and CVE-2025-59719 on Fortinet devices FortiOS / FortiGate, using multiple identification techniques: passive, active, and authenticated. Supports: • Passive detection by...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC Proof-of-Concept of Local Privilege Escalation for FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and below 5.2 Triggered by fnsysctl and USB so physical access required. This PoC spawns local root shell by exploiting CVE-2017-14187. Write-up Korean English TL;DR 1. fnsysctl cp...

CVE-2022-42475-POC

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

FortiOS-Credentials-Disclosure

FortiOS-Credentials-Disclosure CVE-2018-13379 Exploit Usage : python CVE-2018-13379.py list.txt...

CVE-2018-13379-FortinetVPN

CVE-2018-13379-FortinetVPN An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource...

CVE-2022-40684

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

Fortinet - Authentication Bypass

Fortinet FortiOS is vulnerable to an information disclosure via service-worker.js that could allow an attacker to access sensitive information.This vulnerability affects FortiOS and could potentially lead to unauthorized access to the system. id: CVE-2024-55591 info: name: Fortinet - Authenticati...