340 matches found
cve-2022-42475
cve-2022-42475 Codice POC per sfruttare l'Heap overflow nel demone SSLVPN di Fortinet Note Questo è un POC rapido e sporco che probabilmente non funzionerà da nessuna parte a meno che tu non sia estremamente fortunato. Dipende dalla versione e contiene alcuni offset hardcoded che molto...
CVE-2024-24919
CVE-2024-24919 Template Nuclei para descobrir CVE-2024-24919. Uma vulnerabilidade de path traversal no CheckPoint SSLVPN. A propósito. Ótimo artigo, essa foi minha inspiração para escrever este template simples às 2:00 da manhã. Recurso:...
cve-2022-42475-Fortinet
cve-2022-42475 利用 Fortinet SSLVPN 守护进程中堆溢出的 POC 代码 使用方法 pip install pwntools 要使用此代码,你可以将其保存到文件中,例如 exploit.py,然后在命令行中使用 Python 运行它,并传入所需参数。以下是运行该漏洞利用程序的示例命令: python exploit.py 将 替换为目标系统的主机名或 IP 地址,将 替换为易受攻击服务的端口号,将 替换为您希望接收 shell 的机器 IP 地址。其余参数是您要执行的命令,以空格分隔。 例如,如果目标系统的 IP 地址为...
cve-2022-42475
FortiOS SSL-VPN Pufferüberlauf-Schwachstelle cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 POC-Code zur Ausnutzung des Heap-Überlaufs im SSLVPN-Daemon von Fortinet Hinweise Dies ist ein schneller und schmutziger POC, der wahrscheinlich nirgendwo funktionieren wird, es sei denn, S...
VulnCheck KEV: CVE-2025-40601
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...
CVE-2026-4116
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...
EUVD-2026-20906
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2022-23989
In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...
CVE-2019-7487
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...
EUVD-2021-12930
Malware in sbrugna...
EUVD-2015-7286
Malware in sbrugna...
EUVD-2021-12929
Malware in sbrugna...
EUVD-2020-26384
Malware in sbrugna...
EUVD-2020-26386
Malware in sbrugna...
EUVD-2020-26390
Malware in sbrugna...