fortinet-cve-2024-50562

Fortinet SSL-VPN Session Reuse Vulnerability CVE-2024-50562 Professional, permission-only scanner that proves whether a FortiGate invalidates session cookies after logout. A positive finding confirms CVE-2024-50562 — an Insufficient Session Expiration flaw CWE-613 that lets an attacker replay a...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheckvalidate endpoint with reverse shell payload delivery. Here’s a GitHub-style writeup for your project, including a clean and concise summary, a usage guide, and context on how it fits...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Herramienta de explotación, Puede usar esta herramienta para verificar la vulnerabilidad en su FortiGate SSL-VPN. Esta vulnerabilidad afecta las siguientes versiones: • FortiOS 6.0 - 6.0.0 a 6.0.4 • FortiOS 5.6 - 5.6.3 a 5.6.7 • FortiOS 5.4 - 5.4.6 a 5.4.12...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN Vulnerability 🔍 Overview CVE-2018-13379 is a critical path traversal vulnerability in Fortinet FortiOS SSL VPN. It allows attackers to download VPN web session files and extract sensitive information. Impact: Information disclosure usernames, session tokens...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Description CVE-2022-42475 is a heap-based buffer overflow vulnerability in the FortiOS SSL VPN service that allows unauthenticated attackers to remotely execute arbitrary code RCE via specially crafted HTTP requests...

cve-2022-42475

FortiOS SSL-VPN 缓冲区溢出漏洞 cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 用于利用 Fortinet 的 SSLVPN 守护进程中堆溢出的 POC 代码 说明 这是一个快速而粗糙的 POC，除非你极其幸运，否则很可能无法在任何地方工作。它依赖于版本，并包含一些硬编码的偏移量，这些偏移量很可能因系统而异。 使用方法 python3 cve-2022-42475.py 远程主机 远程端口 本地主机 '命令' root@kitploit: python3 cve-2022-42475.py...

SSL-VPN Symlink Persistence Patch Bypass

...

CVE-2022-35842

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS...

EUVD-2025-34237

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

CVE-2025-25252

This CVE (CVE-2025-25252) concerns an Insufficient Session Expiration (CWE-613) in FortiOS SSL VPN across multiple major releases, allowing a remote attacker with a valid SAML session record (e.g., a former admin) to access or reopen that session via re-use of the SAML record. A public POC exists...

CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

Insufficient Session Expiration in SSLVPN using SAML authentication

...

PT-2025-41947

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.2 FortiOS versions 7.4.0 through 7.4.6 FortiOS versions 7.2.0 through 7.2.10 FortiOS versions 7.0.0 through 7.0.16 FortiOS version 6.4 Description An insufficient session expiration issue exists in FortiOS SS...

EUVD-2019-7961

Malware in sbrugna...

EUVD-2017-16713

Malware in sbrugna...

EUVD-2022-38715

Malicious code in bioql PyPI...

EUVD-2025-17805

Malicious code in bioql PyPI...

FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse

!/usr/bin/env python3 """ Exploit Title: FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse Date: 2025-06-15 Exploit Author: Shahid Parvez Hakim BugB Technologies Vendor Homepage: https://www.fortinet.com Software Link: https://www.fortinet.com/products/secure-sd-wan/fortigate...

CVE-2025-25250

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability CWE-200 in FortiOS version 7.6.0, version 7.4.7 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions SSL-VPN web-mode may allow an authenticated user to access full SSL-VPN settings via crafted URL...