NachoVPN

NachoVPN 🌮🔒 NachoVPN — это Proof of Concept, демонстрирующий эксплуатацию SSL-VPN клиентов с помощью поддельного VPN-сервера. Он использует плагинную архитектуру, чтобы сообщество могло добавлять поддержку дополнительных SSL-VPN продуктов. В настоящее время поддерживаются различные популярные...

CVE-2024-3400

CVE-2024-3400 برهان المفهوم لأغراض تعليمية فقط. استخدم فقط على الخوادم التي لديك إذن باختبارها. كيفية الاستخدام المتطلبات: $ pip install rich فحص targets.txt: $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36... - Checking...

CVE-2024-3400

PAN-OS CVE-2024-3400 Vérification Aperçu POUR USAGE INTERNE UNIQUEMENT Ce script vérifie la présence de preuves de l'exploitation de la CVE-2024-3400 PAN-OS sur les pare-feux Palo Alto Networks. CVE: https://security.paloaltonetworks.com/CVE-2024-3400 IOCs:...

CVE-2024-3400-PoC

يحتوي هذا المستودع على سكربت لإعداد البيئة الآمنة للاستغلال وسكربت مسؤول عن تنفيذ مراحل الاستغلال الخاصة بـ: CVE-2024-3400 بيئة اختبار جدار الحماية Palo Alto يوفر هذا المستودع سكربت شل يسمح لك بإعداد بيئة اختبار لجدار الحماية Palo Alto بسرعة مع التهيئة اللازمة لاختبار استغلال الثغرة. المتطلبات...

Palo Alto Expedition - Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. id: CVE-2024-5910 info: name: Palo Alto Expedition - Admin Account Takeover author: johnk3r severity: critical...

cve-2024-3400

cve-2024-3400 برنامج بايثون للاستغلال والفحص لـ CVE-2024-3400 حقن الأوامر في Palo Alto وإنشاء ملفات تعسفية usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploit module of script check...

CVE-2024-3400-POC

Script de test RCE CVE-2024-3400 Aperçu Ce script Python est conçu pour tester une vulnérabilité d'exécution de code à distance RCE, spécifiquement CVE-2024-3400, qui affecte certains portails GlobalProtect de Palo Alto Networks. La vulnérabilité permet l'exécution non autorisée de commandes via ...

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400- مقدمة CVE‑2024‑3400 هي ثغرة حرجة بدرجة CVSS 10.0 من نوع حقن الأوامر في ميزة GlobalProtect في نظام Palo Alto Networks PAN-OS، تم الكشف عنها لأول مرة في 12 أبريل 2024. github.com+10 التحقيق والمعالجة...

CVE-2021-44228

CVE-2021-44228 يحتوي هذا المستودع على نصوص مجتمعية معدلة مرتبطة بـ CVE-2021-44228 تم نقلها إلى بيئات EDR. تم تعديل النصوص البرمجية لتكون متوافقة مع المتطلبات الإضافية للتقنيات الأخرى. انظر إلى المستودعات المرتبطة للحصول على نسخة محدثة وأصلية من النصوص المعدلة. Cortex XDR من Palo Alto تم جعل جميع...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

The vulnerability of the EndPoint DLP module of the remote access user protection agent for corporate resources and applications provided by Palo Alto Networks’ Prisma Access Agent allows attackers to bypass existing security mechanisms and expose protected information.

The vulnerability of the EndPoint DLP module of the remote user access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows attackers to bypass existing security measure...

The software’s vulnerability for providing secure remote access to data through the Palo Alto Networks GlobalProtect App allows a perpetrator to execute arbitrary commands.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2026-0304

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

CVE-2026-0306

A vulnerability in the EndPoint Data Loss Prevention DLP enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not...

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

EUVD-2026-75268

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

CVE-2026-0305

CVE-2026-0305 is currently a reserved candidate with no public technical details available in the provided documents. The affected product, root cause, and impact remain unspecified. Monitor for updates when the candidate is publicized.