CVE-2018-13379

Usage & Disclaimer This script is a batch detection script for the Fortinet FortiOS Path Traversal Vulnerability CVE-2018-13379. Usage: Python CVE-2018-13379.py url.txt Vulnerability addresses are output to vul.txt Affected Versions: Fortinet FortiOS versions 5.6.3 - 5.6.7 and 6.0.0 - 6.0.4 with...

CVE-2018-13379-FortinetVPN

CVE-2018-13379-FortinetVPN An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type: application/x-www-form-urlencoded...

at-doom-fortigate

At Doom Fortigate ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||. . . . . . . ||...

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Check if your firewall is vulnerable to CVE-2024-21762 unauthenticated RCE For more information about the vulnerability: https://cuty.io/TKyfFh Subscribe or join my social networks for more HACKING!! Learn to detect the vulnerability and protect...

cve2018-13379-nmap-script

cve2018-13379-nmap-script CVE-2018-13379 Script for Nmap NSE An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN pre-auth file reading Reference 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

ivantiunlocker

ivantiunlocker Prevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN Many security issues around SSL VPN devices recently. You can't feel safe anymore. And then there is CVE-2025-22457 ! Read the story behind it :...

CVE-2023-27997-Check

CVE-2023-27997-Check Fofa Query : app="FORTINET-SSLVPN" Install $ git https://github.com/imbas007/CVE-2023-27997-Check.git $ cd CVE-2023-27997-check $ pip3 install -r requirements.txt Usage usage: CVE-2023-27997.py -h -u URL | -f FILELIST options: -h, --help show this help message and exit -u URL...

pulsexploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...

patch-CVE-2026-12087

Patch: CVE-2026-12087 Vulnerability Details CVE : CVE-2026-12087 Product : Fortinet FortiOS Description : Heap overflow in SSL-VPN Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-05-10 Status| deployed Deployed To| Production Validated By| SecOps Team References N...

cve-2024-21762-poc

cve-2024-21762-poc CVE-2024-21762 is a critical vulnerability in Fortinet's FortiOS and FortiProxy products, located in their SSL VPN component. This vulnerability allows unauthenticated remote attackers to execute arbitrary code or commands on the target system through specially crafted HTTP...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 Exploit PoC Script with ROP Chain Table of Contents Description Affected Versions Installation Usage Example Output Technical Details Warnings References Description fgt-cve-2023-27997-exploit.py is a Proof‑of‑Concept PoC exploit script...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Description CVE-2022-42475 is a heap-based buffer overflow vulnerability in the FortiOS SSL VPN service that allows unauthenticated attackers to remotely execute arbitrary code RCE via specially crafted HTTP requests...

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability USAGE: python3 CVE-2019-11510.py...

CVE-2019-11510-1

CVE-2019-11510-1 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 python usage: python CVE-2019-11510.py https://x.x.x.x 参考链接： https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...

NachoVPN

NachoVPN 🌮🔒 NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server. It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by the community. It currently supports various popular corporate VPN...

CVE-2019-11510

CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...

CVE-2022-35416

CVE-2022-35416 H3CSSLVPNXSSReflected XSS CVE-2022-35416 from https://www.cloudwaf.cc/cve/cve-2022-35416 Payload: Shodan: http.htmlhash:510586239 Access address：https://IP:PORT/wnm/login/login.json. Payload: Cookie: svpnlang=XSSPAYLOAD Description H3C SSL VPN through 2022-07-10 allows...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Mass Exploit for Fortinet FortiOS SSL VPN A tool for mass exploitation of the CVE-2018-13379 path traversal vulnerability in Fortinet FortiOS SSL VPN. Allows reading session files and extracting logins and passwords in cleartext. Features Exploitation of CVE-2018-13379 via the...