91 matches found
CVE-2025-0133
CVE-2025-0133 漏洞扫描器 一个基于Bash的自动化扫描工具，用于检测 Palo Alto GlobalProtect 网关和门户 中的 CVE-2025-0133 反射型XSS漏洞，使用 nuclei 和 shodanx。 作者 : 日期 : 2025-06-23 严重性 : 中 CVE ID : CVE-2025-0133 漏洞类型 : 反射型跨站脚本 XSS 测试对象 : Palo Alto Networks GlobalProtect 门户 PAN-OS 概述...
cve-2025-0133
CVE-2025-0133 反射型 XSS 检测工具 作者 ：Derek Odiorne 日期 ：2025-05-23 严重性 ：中危 测试对象 ：Palo Alto Networks GlobalProtect Portal（PAN-OS） 📌 摘要 该脚本针对 Palo Alto Networks PAN-OS 软件中 GlobalProtect 门户和网关登录页面 的 CVE-2025-0133 （一个反射型跨站脚本（XSS）漏洞）执行安全、经授权的测试 。 该工具使用两种特定于上下文的载荷测试多个常见参数： HTML 上下文 （alert） JavaScript 字符串上下文...
CVE-2024-3400-RCE-Scan
Cyberspace Mapping Dork Fofa root@kitploit: app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye root@kitploit: app:"Palo Alto Networks firewall httpd"...
CVE-2024-3400-pot
CVE-2024-3400-pot 针对CVE-2024-3400 Palo Alto PAN-OS命令注入漏洞的简单蜜罐。 特性 模拟访问 /global-protect/login.esp（GlobalProtect 门户登录页面） 模拟 HTTP 请求 POST /ssl-vpn/hipreport.esp 和 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/; 从 cookie 中提取文件名（如果存在） 将 POST 请求的内容保存到文件中 模拟用户请求 GET...
Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os
CVE-2026-0257 - GlobalProtect portal Authentication Bypass...
Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os
CVE-2026-0257 Palo Alto Networks PAN-OS contain...
Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os
🚨 CVE-2026-0257 - Authentication Bypass Vulnerabilities...
Exploit for CVE-2026-0257
CVE-2026-0257 — PAN-OS GlobalProtect Authentication Bypass...
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
VulnCheck KEV: CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
CVE-2026-0257
CVE-2026-0257 affects Palo Alto Networks PAN-OS GlobalProtect Portal and GlobalProtect Gateway (not Panorama/Cloud NGFW). The vulnerability is an authentication bypass (CWE-565) that can allow an unauthenticated attacker to bypass security restrictions and establish an unauthorized VPN connection...
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability. Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN- OS software...
PT-2026-40754
Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 10.2.7 PAN-OS version 10.2.8 PAN-OS version 10.2.9 PAN-OS version 10.2.10 PAN-OS version 10.2.11 Prisma Access affected versions not specified Description Authentication bypass flaws in the GlobalProtect portal and...
CVE-2026-0227
CVE-2026-0227 affects Palo Alto Networks PAN-OS with a DoS that unauthenticated actors can trigger by repeatedly sending requests to GlobalProtect Gateway/Portal, causing the firewall to enter maintenance mode. The issue is described as due to an improper check for exceptional conditions (CWE-754...
CVE-2026-0227 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service DoS to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode...
