146 matches found
CVE-2024-48887-FortiSwitch-Exploit
CVE-2024-48887-FortiSwitch-Exploit 🚨 FortiSwitch CVE-2024-48887 PoC JavaScript 🚨 🔥 刚刚发布了一个轻量级 JavaScript 代码片段，演示了如何在存在漏洞的 Fortinet FortiSwitch GUI 端点上触发未经授权的密码更改。 🛠️ 关于漏洞： 攻击者可以构造一个简单的 fetch 请求，在无需任何认证的情况下操纵密码设置，直接针对 /changepass 端点变体。 root@kitploit: fetch'http://target-ip/changepass', method:...
CVE-2024-48887-Exploit
CVE-2024-48887-Unverified Password Change CWE-620 Overview An unverified password change vulnerability in Fortinet FortiSwitch GUI that allows a remote unauthenticated attacker to change admin passwords via a specially crafted request Exploit: Download here Details CVE ID : CVE-2024-48887 Publish...
SSL-VPN Reflected XSS
...
EUVD-2025-209452
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions,...
EUVD-2026-10516
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
EUVD-2026-10515
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
CVE-2026-22627
A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet...
CVE-2026-22627
CVE-2026-22627 affects Fortinet FortiSwitch AX Fixed 1.0.0 through 1.0.1. The vulnerability is a buffer copy without input size checking in LLDP packet handling, enabling an unauthenticated attacker on the same adjacent network to run arbitrary code or commands on the device. Impact per the entry...
CVE-2026-22628
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
shell command limitation bypass by SSH local config overriding
...
Buffer Overflow in LLDP OUI field
...
CVE-2025-49201
CVE-2025-49201 concerns Fortinet FortiPAM (versions 1.0.0–1.5.0) and FortiSwitchManager (7.2.0–7.2.4). Multiple sources confirm a weak authentication mechanism that enables an attacker to execute unauthorized code or commands by sending specially crafted HTTP requests, i.e., remote code execution...
Weak authentication in WAD/GUI
...
EUVD-2019-7963
Malware in sbrugna...
EUVD-2016-5559
Malware in sbrugna...
EUVD-2021-12932
Malware in sbrugna...
EUVD-2023-41790
Malicious code in bioql PyPI...
EUVD-2021-31021
Malicious code in bioql PyPI...