132 matches found
CVE-2024-23108
CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...
Fortinet FortiSIEM 7.4.1 <= 7.4.2 / 7.5.0 <= 7.5.1 Open Redirect (FG-IR-26-169)
The version of Fortinet FortiSIEM running on the remote host is 7.4.1 through 7.4.2, or 7.5.0 through 7.5.1. It is, therefore, affected by a URL redirection to untrusted site vulnerability: - A URL redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM may allow an...
Fortinet FortiSIEM 6.4.x < 7.2.7 / 7.3.x < 7.3.5 / 7.4.x < 7.4.1 XSS (FG-IR-26-149)
The version of Fortinet FortiSIEM running on the remote host is 6.4.x through 7.2.x prior to 7.2.7, 7.3.x prior to 7.3.5, or 7.4.0. It is, therefore, affected by a cross-site scripting vulnerability: - An improper neutralization of script-related HTML tags in a web page basic XSS vulnerability in...
CVE-2026-59838
CVE-2026-59838 is an XSS-type vulnerability described as improper neutralization of script-related HTML tags in Fortinet FortiSIEM. Affected versions span FortiSIEM 7.4.0; 7.3.0–7.3.4; 7.2.0–7.2.6; 7.1.x; 7.0.x; and all 6.x versions (6.4–6.7). The issue could allow an attacker to execute unauthor...
CVE-2026-25972
Fortinet FortiSIEM versions 7.3.0–7.3.4 and 7.4.0 have an improper neutralization of input during web page generation that enables cross-site scripting. An unauthenticated remote attacker can supply arbitrary data via spoofed URL parameters to perform a social engineering attack via the UI. CVSSv...
CVE-2026-25972
An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters...
Fortinet FortiSIEM 跨站脚本漏洞
Fortinet FortiSIEM is a security information and event management system developed by the American company Fortinet. This system includes features such as asset discovery, workflow automation, and unified management. Versions of Fortinet FortiSIEM ranging from 7.3.0 to 7.3.4 contain a cross-site...
⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More
In cybersecurity, the line between a normal update and a serious incident keeps getting thinner. Systems that once felt reliable are now under pressure from constant change. New AI tools, connected devices, and automated systems quietly create more ways in, often faster than security teams can...
Exploit for CVE-2025-64155
CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remot...
CVE-2022-26119
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password...
CVE-2019-16153
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...
EUVD-2019-7959
Malware in sbrugna...
EUVD-2024-42207
Malicious code in bioql PyPI...
EUVD-2023-40498
Malicious code in bioql PyPI...
EUVD-2023-45268
Malicious code in bioql PyPI...
EUVD-2023-40500
Malicious code in bioql PyPI...
EUVD-2024-20634
Malicious code in bioql PyPI...
EUVD-2022-30686
Malicious code in bioql PyPI...