CVE-2025-4660

Description A PoC for CVE-2025-4660, Forescout SecureConnector RCE forescoutredirect.py This is the exploit itself where you can redirect an agent to a specific IP address under the attackers control forescoutc2.py A simple C2 implementation that speaks the ForeScout SecureConnector language...

Forescout CounterACT 6.3.4.1 - Open Redirect

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 'a' parameter. id: CVE-2012-4982 info: name: Forescout CounterACT 6.3.4.1 - Open Redirect...

CVE-2024-9950-PoC

CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07 Detail My Blog Info Vulnerability: Creation of Temporary Script in Directory with Insecure Permissions Severity: Medium to High Vector: Local Windows OS machine Attack Complexity: Low Privileges Required: Low Categories: Local Privilege...

CVE-2025-13833 Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...

CVE-2025-13833

A vulnerability exists in SecureConnector for Windows involving insecure TLS fingerprint validation . When the "Additional Appliance Connections" setting is enabled and the configuration file contains more than three trusted-server entries, the agent may accept sessions with malicious servers if ...

Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds...

Forescout CounterACT 6.3.4.1 - Open Redirect Detection

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 'a' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in...

EUVD-2021-23317

Malware in sbrugna...

EUVD-2012-1835

Malware in sbrugna...

EUVD-2012-4907

Malware in sbrugna...

EUVD-2012-4909

Malware in sbrugna...

EUVD-2021-14802

Malware in sbrugna...

EUVD-2023-43099

Malicious code in bioql PyPI...

EUVD-2024-50232

Malicious code in bioql PyPI...

EUVD-2024-20325

Malicious code in bioql PyPI...

EUVD-2024-50357

Malicious code in bioql PyPI...

Exploit for Incorrect Default Permissions in Forescout Secureconnector

Description A PoC for CVE-2025-4660, Forescout SecureConne...

CVE-2024-22795

Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component...

CVE-2024-9949

Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application...

CVE-2021-28098

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...