123 matches found
Fortinet FortiNAC keyUpload Cron RCE (CVE-2022-39952)
Horizon3 PoC: unauthenticated POST to /configWizard/keyUpload.jsp with a ZIP placing a cron job under /etc/cron.d/. Use a CMD reverse payload. !/usr/bin/env python3 -- coding: utf-8 -- """ CVE-2022-39952 — Fortinet FortiNAC arbitrary file write via keyUpload.jsp Horizon3. Uploads a ZIP whose entr...
CVE-2022-39952
CVE-2022-39952 POC for CVE-2022-39952 affecting Fortinet FortiNAC The default configuration of this exploit writes a cron job to create a reverse shell. Be sure to change the payload file to suite your environment. Technical Analysis A technical root cause analysis of the vulnerability and...
Fortinet FortiNAC Login Panel - Detect
Fortinet FortiNAC login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiNAC login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet FortiNAC Login Panel -...
CVE-2026-21741
Fortinet FortiNAC-F is affected by an Open Redirect (CWE-601) vulnerability across FortiNAC-F 7.6.0–7.6.5, FortiNAC-F 7.4 all versions, and FortiNAC-F 7.2 all versions. The issue allows a remote privileged attacker with the system administrator role to redirect users to an arbitrary website by up...
Fortinet FortiNAC-F has a vulnerability related to input validation errors.
Fortinet FortiNAC-F is a network access control solution developed by the American company Fortinet. This product is primarily used for network access control and IoT security protection. Vulnerabilities exist in versions 7.6.0 to 7.6.5, 7.4, and 7.2 of Fortinet FortiNAC-F, due to input validatio...
CVE-2022-38376
Multiple improper neutralization of input during web page generation 'Cross-site Scripting' vulnerabilities CWE-79 in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests...
EUVD-2019-15169
Malware in sbrugna...
EUVD-2021-30018
Malicious code in bioql PyPI...
EUVD-2022-43947
Malicious code in bioql PyPI...
EUVD-2023-37462
Malicious code in bioql PyPI...
EUVD-2022-43949
Malicious code in bioql PyPI...
EUVD-2022-40961
Malicious code in bioql PyPI...
EUVD-2022-43946
Malicious code in bioql PyPI...
EUVD-2022-43948
Malicious code in bioql PyPI...
EUVD-2023-30031
Malicious code in bioql PyPI...
EUVD-2022-42398
Malicious code in bioql PyPI...
EUVD-2023-37463
Malicious code in bioql PyPI...
EUVD-2022-42397
Malicious code in bioql PyPI...
CVE-2023-26206
An improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs...
CVE-2023-33299
A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed...