CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC ماسح ضوئي لإثبات المفهوم PoC يستهدف CVE-2024-21762 في نقطة نهاية /remote/hostcheckvalidate الخاصة بـ FortiOS SSL VPN مع تسليم حمولة قشرة عكسية reverse shell. إليك وصف GitHub لمشروعك، بما في ذلك ملخص نظيف وموجز، ودليل استخدام، وسياق حول كيفية توافقه مع الثغرة الأمنية. 🔥...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitationstool, Sie können dieses Tool verwenden, um die Schwachstelle in Ihrem FortiGate SSL-VPN zu überprüfen. Diese Sicherheitslücke betrifft die folgenden Versionen: • FortiOS 6.0 - 6.0.0 bis 6.0.4 • FortiOS 5.6 - 5.6.3 bis 5.6.7 • FortiOS 5.4 - 5.4.6...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descripción CVE-2022-42475 es una vulnerabilidad de heap-based buffer overflow en el servicio SSL VPN de FortiOS que permite a atacantes no autenticados ejecutar código arbitrario de forma remota RCE mediante solicitudes...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN 越界写入 概述...

cve-2022-42475

FortiOS SSL-VPN Pufferüberlauf-Schwachstelle cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 POC-Code zur Ausnutzung des Heap-Überlaufs im SSLVPN-Daemon von Fortinet Hinweise Dies ist ein schneller und schmutziger POC, der wahrscheinlich nirgendwo funktionieren wird, es sei denn, S...

CVE-2018-13379

🛡️ CVE-2018-13379 - Vulnerabilità Fortinet SSL VPN 🔍 Panoramica CVE-2018-13379 è una vulnerabilità critica di path traversal in Fortinet FortiOS SSL VPN. Consente agli attaccanti di scaricare file di sessione web VPN ed estrarre informazioni sensibili. Impatto: Divulgazione di informazioni nomi...

fortinet-cve-2024-50562

Vulnerabilidade de Reutilização de Sessão SSL-VPN da Fortinet CVE-2024-50562 Scanner profissional, somente com permissão , que comprova se um FortiGate invalida os cookies de sessão após o logout. Um resultado positivo confirma CVE-2024-50562 — uma falha de Expiração de Sessão Insuficiente CWE-61...

CVE-2022-35842

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS...

EUVD-2025-34237

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

CVE-2025-25252

This CVE (CVE-2025-25252) concerns an Insufficient Session Expiration (CWE-613) in FortiOS SSL VPN across multiple major releases, allowing a remote attacker with a valid SAML session record (e.g., a former admin) to access or reopen that session via re-use of the SAML record. A public POC exists...

CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

PT-2025-41947

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.2 FortiOS versions 7.4.0 through 7.4.6 FortiOS versions 7.2.0 through 7.2.10 FortiOS versions 7.0.0 through 7.0.16 FortiOS version 6.4 Description An insufficient session expiration issue exists in FortiOS SS...

EUVD-2019-7961

Malware in sbrugna...

EUVD-2017-16713

Malware in sbrugna...

EUVD-2022-38715

Malicious code in bioql PyPI...

EUVD-2025-17805

Malicious code in bioql PyPI...

FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse

!/usr/bin/env python3 """ Exploit Title: FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse Date: 2025-06-15 Exploit Author: Shahid Parvez Hakim BugB Technologies Vendor Homepage: https://www.fortinet.com Software Link: https://www.fortinet.com/products/secure-sd-wan/fortigate...

CVE-2025-25250

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability CWE-200 in FortiOS version 7.6.0, version 7.4.7 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions SSL-VPN web-mode may allow an authenticated user to access full SSL-VPN settings via crafted URL...

CVE-2024-50562

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session...

CVE-2024-50562

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session...