Fortinet Multiple Products Formatting String Error Vulnerability

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees from network attacks by combining a variety of detection technologie...

The vulnerability of the software for central device management in Fortinet’s FortiManager, as well as the security monitoring and analysis tools FortiAnalyzer and FortiAnalyzer-BigData, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Fortinet FortiManager software for centralized device management, as well as the FortiAnalyzer and FortiAnalyzer-BigData security monitoring and analysis tools, is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious...

CVE-2023-44253

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate...

CVE-2023-44253: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate...

PT-2023-9784 · Fortinet · Fortianalyzer +2

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions prior to 7.4.2 Fortinet FortiAnalyzer versions prior to 7.4.2 Fortinet FortiAnalyzer-BigData versions prior to 7.2.5 Description: The issue is related to exposure of sensitive information to an unauthorized acto...

CVE-2019-12634

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a...

phpMoAdmin - MongoDB unauthenticated remote execution 0day authomatic exploit

This is an unauthenticated remote execution 0day exploit coded by sp1nlock phpMoAdmin is a web interface for mongodb databases, is like phpmyadmin but for this nosql bigdata oriented database named MongoDB. Usage Info ./phpmohack.py url cmd ex: ./phpmohack.py http://test.com/path/ 'ls -l' This is...