117 matches found
CVE-2024-23108
CVE-2024-23108 POC 취약한 FortiSIEM 어플라이언스에서 결과 확인 없이 root 권한으로 명령을 실행하는 개념 증명 익스플로잇입니다. 저는 단순히 목록을 제공하는 옵션과 일부 색상을 추가했습니다. 원본그리고 모든 공로은 horizon3에게 있습니다아래 블로그 게시물 참조. 블로그 게시물 근본 원인 및 침해 지표는 여기에서 확인하세요:...
Fortinet FortiSIEM 6.4.x < 7.2.7 / 7.3.x < 7.3.5 / 7.4.x < 7.4.1 XSS (FG-IR-26-149)
The version of Fortinet FortiSIEM running on the remote host is 6.4.x through 7.2.x prior to 7.2.7, 7.3.x prior to 7.3.5, or 7.4.0. It is, therefore, affected by a cross-site scripting vulnerability: - An improper neutralization of script-related HTML tags in a web page basic XSS vulnerability in...
CVE-2026-59838
CVE-2026-59838 is an XSS-type vulnerability described as improper neutralization of script-related HTML tags in Fortinet FortiSIEM. Affected versions span FortiSIEM 7.4.0; 7.3.0–7.3.4; 7.2.0–7.2.6; 7.1.x; 7.0.x; and all 6.x versions (6.4–6.7). The issue could allow an attacker to execute unauthor...
CVE-2026-25972
Fortinet FortiSIEM versions 7.3.0–7.3.4 and 7.4.0 have an improper neutralization of input during web page generation that enables cross-site scripting. An unauthenticated remote attacker can supply arbitrary data via spoofed URL parameters to perform a social engineering attack via the UI. CVSSv...
CVE-2026-25972
An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters...
Fortinet FortiSIEM 跨站脚本漏洞
Fortinet FortiSIEM is a security information and event management system developed by the American company Fortinet. This system includes features such as asset discovery, workflow automation, and unified management. Versions of Fortinet FortiSIEM ranging from 7.3.0 to 7.3.4 contain a cross-site...
⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More
In cybersecurity, the line between a normal update and a serious incident keeps getting thinner. Systems that once felt reliable are now under pressure from constant change. New AI tools, connected devices, and automated systems quietly create more ways in, often faster than security teams can...
Exploit for CVE-2025-64155
CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remot...
CVE-2022-26119
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password...
CVE-2019-16153
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...
EUVD-2019-7959
Malware in sbrugna...
EUVD-2023-45277
Malicious code in bioql PyPI...
EUVD-2021-28175
Malicious code in bioql PyPI...
EUVD-2023-40500
Malicious code in bioql PyPI...
EUVD-2024-20634
Malicious code in bioql PyPI...
EUVD-2023-40498
Malicious code in bioql PyPI...
EUVD-2022-46919
Malicious code in bioql PyPI...
EUVD-2024-42207
Malicious code in bioql PyPI...