419 matches found
CVE-2024-24919
CVE-2024-24919 CVE-2024-24919 탐지를 위한 Nuclei 템플릿. CheckPoint SSLVPN의 경로 순회 취약점입니다. 참고로. 훌륭한 글이었습니다. 새벽 2시에 이 간단한 템플릿을 작성하게 된 영감이 되었습니다. 자료: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/...
cve-2022-42475-Fortinet
cve-2022-42475 Fortinet의 SSLVPN 데몬에서 힙 오버플로우를 악용하는 POC 코드 사용법 pip install pwntools 이 코드를 사용하려면, 파일예: exploit.py에 저장한 후, 필요한 인수를 전달하여 명령줄에서 Python으로 실행하면 됩니다. 다음은 익스플로잇을 실행하는 예제 명령입니다. python exploit.py 를 대상 시스템의 호스트명 또는 IP 주소로, 를 취약한 서비스의 포트 번호로, 를 쉘을 수신할 머신의 IP 주소로 바꾸십시오. 나머지 인수는 공백으로 구분하여 실행할...
cve-2022-42475
FortiOS SSL-VPN 버퍼 오버플로우 취약점 cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 Fortinet SSLVPN 데몬의 힙 오버플로우를 익스플로잇하는 POC 코드 참고 사항 이것은 극히 운이 좋지 않으면 어디에서도 작동하지 않을 가능성이 높은 빠르고 대충 만든 POC입니다. 버전에 따라 다르며, 시스템마다 변경될 가능성이 높은 하드코딩된 오프셋이 포함되어 있습니다. 사용법 python3 cve-2022-42475.py rhost rport lhos...
cve-2022-42475
cve-2022-42475 Fortinet SSLVPN 데몬의 힙 오버플로우를 악용하는 POC 코드 참고 사항 이것은 매우 운이 좋지 않은 한 어디에서도 작동하지 않을 빠르고 대충 만든 POC입니다. 버전에 따라 다르며 일부 하드코딩된 오프셋을 포함하고 있어 시스템마다 변경될 가능성이 큽니다...
CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...
CVE-2026-4116
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...
EUVD-2026-20906
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114: Improper Handling of Unicode Encoding
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4116: Improper Handling of Unicode Encoding
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...
VulnCheck KEV: CVE-2024-40762
Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...
VulnCheck KEV: CVE-2025-40601
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...
CVE-2022-23989
In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...
CVE-2019-7487
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...
CVE-2025-62631: Insufficient Session Expiration
An insufficient session expiration vulnerability CWE-613 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's passwor...
Insufficient Session Expiration in SSLVPN
...
CVE-2025-40601: Stack-based Buffer Overflow
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...