Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Exploração em massa do Fortinet FortiOS SSL VPN Uma ferramenta para exploração em massa da vulnerabilidade CVE-2018-13379 path traversal no Fortinet FortiOS SSL VPN. Permite ler arquivos de sessão e extrair logins e senhas em texto claro. Funcionalidades Exploração da...

Fortinet FortiClientEMS 7.4.4 - SQL Injection

Fortinet FortiClientEMS version 7.4.4 and earlier contains an unauthenticated SQL injection vulnerability in the /api/v1/initconsts endpoint. The 'Site' HTTP header value is passed directly into the PostgreSQL searchpath without sanitization, allowing remote unauthenticated attackers to inject...

CVE-2025-59718-Fortinet-Poc

CVEs: CVE-2025-59718 / CVE-2025-59719 Fortinet Poc Ferramenta para detecção de vulnerabilidades associadas a CVE-2025-59718 e CVE-2025-59719 em dispositivos Fortinet FortiOS / FortiGate, por meio de múltiplas técnicas de identificação: passivas, ativas e autenticadas. Suporta: • Detecção passiva...

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 — FortiOS / FortiProxy / FortiSwitchManager Aut...

CVE-2024-21762-Checker

CVE-2024-21762-Checker Este script realiza varredura de vulnerabilidades para CVE-2024-21762, uma vulnerabilidade de execução remota de código no Fortinet SSL VPN. Ele verifica se um determinado servidor é vulnerável a essa CVE enviando requisições específicas e analisando as respostas. Para mais...

CVE-2022-39952-better

FortiNAC CVE-2022-39952 PoC para CVE-2022-39952 afetando Fortinet FortiNAC. Este exploit permite que um atacante execute comandos arbitrários no servidor FortiNAC. Ele é baseado no PoC desenvolvido por horizon3ai, com opções adicionais para atacar múltiplos hosts. Aviso: Este exploit é apenas par...

fortinet-cve-2024-50562

Vulnerabilidade de Reutilização de Sessão SSL-VPN da Fortinet CVE-2024-50562 Scanner profissional, somente com permissão , que comprova se um FortiGate invalida os cookies de sessão após o logout. Um resultado positivo confirma CVE-2024-50562 — uma falha de Expiração de Sessão Insuficiente CWE-61...

Belsen_Group-et-exploitation-de-la-CVE-2022-40684

BelsenGroup und Ausnutzung der CVE-2022-40684 Kontext Am 29. Januar 2025 veröffentlichte ein Nutzer des Cyberkriminellen-Forums BelsenGroup eine Nachricht, in der er behauptete, 15.000 kompromittierte Fortinet-Geräte mit Konfigurationsdateien und VPN-Passwörtern zu besitzen. Er bietet nun 1.000...

cve-2025-64446-fortiweb-exploit

CVE-2025-64446 Fortinet FortiWeb Path Traversal RCE-Exploit Ein Sicherheitsforschungstool zur Erkennung und Prüfung der Sicherheitslücke CVE-2025-64446 in der Web Application Firewall WAF Fortinet FortiWeb. Diese kritische Zero-Day-Path-Traversal-Schwachstelle wird derzeit aktiv in freier Wildbah...

Exploit for OS Command Injection in Fortinet Fortisandbox

CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection...

FortiLogger 4.4.2.2 - Arbitrary File Upload

FortiLogger 4.4.2.2 is affected by arbitrary file upload issues. Attackers can send a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then Assets/temp/hotspot/img/logohotspot.asp. id: CVE-2021-3378 info: name: FortiLogger 4.4.2.2 - Arbitrary File Upload author:...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-104286link is external Fortinet FortiMail Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and...

VulnCheck KEV: CVE-2026-104286

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests...

Fortinet FortiAnalyzer Uncontrolled Resource Consumption in SNMP (FG-IR-26-172)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-172 advisory. - A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denia...

Fortinet FortiNAC - Arbitrary File Write

Fortinet FortiNAC is susceptible to arbitrary file write. An external control of the file name or path can allow an attacker to execute unauthorized code or commands via specifically crafted HTTP request, thus making it possible to obtain sensitive information, modify data, and/or execute...

EUVD-2026-84423

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-84388: Improper Restriction of Rendered UI Layers or Frames

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

The vulnerability of the Fortinet Privileged Access Agent for Chrome, related to authentication procedures’ flaws, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Fortinet Privileged Access Agent for Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...