SonicWall Virtual Office SSL VPN Login Panel - Detect

SonicWall Virtual Office SSL VPN login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Virtual Office SSL VPN login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Check Point Mobile SSL VPN - Detect

Check Point Mobile SSL VPN was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Check Point Mobile SSL VPN was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Check Point Mobile SSL VPN - Detect',...

Array Networks SSL VPN - Login Panel Detection

Array Networks AG Series SSL VPN appliances provide enterprise remote access. The web login portal Pilot is typically accessible on port 8889 or via /prx/ paths. !/usr/bin/env python3 -- coding: utf-8 -- """Array Networks AG Series SSL VPN appliances provide enterprise remote access.""" from...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting Detection

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. !/usr/bin/env python3 -- coding: utf-8 -- """H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.""" from...

Fortinet FortiOS - Cross-Site Scripting Detection

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. !/usr/bin/env python3 -- coding:...

FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting Detection

FortiGate FortiOS through SSL VPN Web Portal contains a cross-site scripting vulnerability. The login redir parameter is not sanitized, so an attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

Sophos UTM User Portal - Login Panel Detection

Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client access and self-service. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client a.""" from...

SonicWall Secure Mobile Access (SMA) Panel - Detection

Detected SonicWall Secure Mobile Access SMA appliances — an enterprise SSL-VPN gateway for secure remote access SMA 1000/6200/7200 series. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SonicWall Secure Mobile Access SMA appliances — an enterprise SSL-VPN gateway for secure remote acc."""...

Hillstone Networks SSL VPN - Login Panel Detection

Hillstone Networks SSL VPN SG-6000 series is an enterprise network security gateway with SSL VPN capabilities. The web login portal is frequently exposed on standard HTTPS ports. !/usr/bin/env python3 -- coding: utf-8 -- """Hillstone Networks SSL VPN SG-6000 series is an enterprise network securi...

Ivanti Connect Secure Panel - Detect

Ivanti Connect Secure provides a seamless, cost-effective SSL VPN solution for remote and mobile users from any web-enabled device to corporate resources— anytime, anywhere. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure provides a seamless, cost-effective SSL VPN solution for...

Cyberoam SSL VPN Panel - Detect

Cyberoam SSL VPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cyberoam SSL VPN panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyberoam SSL VPN Panel - Detect', 'description':...

VulnCheck KEV: CVE-2025-62631

An insufficient session expiration vulnerability CWE-613 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's passwor...

Cisco ASA/FTD Authentication Bypass Using an Alternate Path or Channel (CVE-2023-20269)

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

FortiPAM SSL-VPN Code Execution

The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...

SSL-VPN Reflected XSS

...

CVE-2026-8452: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overv...

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More

It’s Monday again. This week’s threat list looks painfully familiar: abused integrations, fake tools, poisoned websites, ransomware crews trying to shut down security tools, and mobile malware asking for way too much control. The annoying part is how little of this feels new. Weak credentials,...

Fortinet FortiOS - Credentials Disclosure

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests due to improper limitation of a...

Cisco RV340 SSL VPN unauthenticated RCE (CVE-2022-20699)

Stack buffer overflow in SSL VPN. Sends self.payload bytes ARM stager, optionally encoded by the framework padded to Metasploit layout, over TLS. !/usr/bin/env python3 -- coding: utf-8 -- CVE-2022-20699 — Cisco RV340 SSL VPN RCE Flashback / Metasploit-aligned. import secrets import socket import...