6011 matches found
Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-26262)
Fortinet FortiOS is the United States Fita Fortinet company developed a set of dedicated to FortiGate network security platform on the security operating system. A cross-site scripting vulnerability exists in Fortinet FortiOS. A remote attacker could exploit this vulnerability to execute arbitrar...
FortiOS 5.6.0 - Cross-Site Scripting
FortiOS 5.6.0 - Cross-Site Scripting Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS versions 5.4.0 to...
FortiOS < 5.6.0 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS...
Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS versions 5.4.0 to 5.6.0 CVE-2017-3132 : FortiOS versions...
Hardcoded credentials
A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges...
CVE-2017-7336
A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges...
CVE-2017-7336
A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges...
CVE-2017-7336
CVE-2017-7336 is a vulnerability in Fortinet FortiWLM (affected: FortiWLM 8.3.0 and earlier). A hard-coded account named 'upgrade' allows a remote attacker to log in and execute commands with the privileges of that account. The CVE entry is discussed across multiple sources (NVD, vendor advisory ...
The vulnerability of the FortinetClient for Linux SSL VPN software allows a hacker to execute any file under the authority of the root account.
The vulnerability of FortinetClient for Linux software relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary files on behalf of a root account by replacing the subproc file with another file, including a executable one...
Fortinet FortiOS 5.2.x / 5.3.x / 5.4.x < 5.4.5 Multiple XSS (FG-IR-17-127)
The version of Fortinet FortiOS running on the remote device is 5.2.x, 5.3.x, or 5.4.x prior to 5.4.4. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting XSS vulnerability exists when saving configuration revisions due to improper validation...
Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-11805)
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A cross-site...
Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-11806)
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A cross-site...
Free Mac Ransomware-as-a-Service MacRansom Surfaces
Researchers on Friday began warning of MacRansom, a new and free macOS-based ransomware as a service RaaS that’s been making the rounds over the past several weeks. It leverages a portal hosted on the Tor network, but attackers looking for the malware won’t find it there. Interested parties need ...
Fortinet FortiAnalyzer / FortiManager 5.4.x < 5.4.3 Open Redirect (FG-IR-17-014)
The version of FortiAnalyzer or FortiManager running on the remote device is 5.4.x prior to 5.4.3. It is, therefore, affected by a cross-site redirection vulnerability in its web-based user interface due to improper validation of input before returning it to users. An unauthenticated, remote...
CVE-2017-3127
A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation...
Cross site scripting
A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation...
CVE-2017-3127
CVE-2017-3127 is an XSS vulnerability in Fortinet FortiGate FortiOS versions 5.2.0–5.2.10, triggered by the srcintf parameter during Firewall Policy Creation. An authenticated remote attacker can inject scripts that run in a user’s browser session. Exploitation details are consistent with an XSS ...
CVE-2017-3127
A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation...
Fortinet FortiClient SSL_VPN for Linux Remote Code Execution Vulnerability
Fortinet FortiClient SSLVPN for Linux is a Linux-based VPN client for connecting to Fortinet devices. A remote code execution vulnerability exists in Fortinet FortiClient SSLVPN for Linux. An attacker can exploit this vulnerability to overwrite arbitrary files with FortiClient log files...
