89 matches found
CVE-2024-9950-PoC
CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07 Detail My Blog Info Vulnerability: Creation of Temporary Script in Directory with Insecure Permissions Severity: Medium to High Vector: Local Windows OS machine Attack Complexity: Low Privileges Required: Low Categories: Local Privilege...
CVE-2025-4660
Description A PoC for CVE-2025-4660, Forescout SecureConnector RCE forescoutredirect.py This is the exploit itself where you can redirect an agent to a specific IP address under the attackers control forescoutc2.py A simple C2 implementation that speaks the ForeScout SecureConnector language...
CVE-2025-13833
A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...
CVE-2025-13833
A vulnerability exists in SecureConnector for Windows involving insecure TLS fingerprint validation . When the "Additional Appliance Connections" setting is enabled and the configuration file contains more than three trusted-server entries, the agent may accept sessions with malicious servers if ...
EUVD-2025-211200
A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...
CVE-2025-13833 Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution
A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...
CVE-2025-13833: Improper Certificate Validation
A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...
Forescout Technologies SecureConnector encryption issue vulnerability
Forescout Technologies SecureConnector versions 11.3.20 and earlier contain an encryption vulnerability. This vulnerability arises when the “Additional Appliance Connections” setting is enabled and the proxy configuration file contains more than three entries for trusted servers; in such cases,...
PT-2026-125127
A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...
EUVD-2016-10292
Malware in sbrugna...
EUVD-2016-10291
Malware in sbrugna...
EUVD-2024-50357
Malicious code in bioql PyPI...
EUVD-2023-43099
Malicious code in bioql PyPI...
EUVD-2024-20325
Malicious code in bioql PyPI...
EUVD-2024-50232
Malicious code in bioql PyPI...
Exploit for Incorrect Default Permissions in Forescout Secureconnector
Description A PoC for CVE-2025-4660, Forescout SecureConne...
CVE-2024-22795
Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component...
CVE-2024-9949
Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application...
CVE-2025-4660
A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without...
CVE-2025-4660
A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without...