CVE-2021-26088

PowerShellで書かれたCVE-2021-26088のPoC 説明 FSSO Collectorの不適切な認証脆弱性により、認証されていないユーザーが特別に細工されたUDPログイン通知パケットを送信することで、任意のファイアウォール認証ルールをバイパスし、保護されたネットワークにアクセスできる可能性があります。 https://www.fortiguard.com/psirt/FG-IR-20-191 内容 forgeauth.ps1: メインエクスプロイト checksrcport.ps1: 現在のユーザーに割り当てられた送信元ポート範囲を取得 免責事項...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088: Improper Authentication

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

Ring Makes 2-Factor Authentication Mandatory Following Recent Hacks

Smart doorbells and cameras bring a great sense of security to your home, especially when you're away, but even a thought that someone could be spying on you through the same surveillance system would shiver up your spine. Following several recent reports of hackers gaining access to people's...

DRUPAL-CONTRIB-2019-013

This module provides a field on user profiles which allows users to get a notification when their account logs in to the site. The notification e-mail includes a link which will terminate all sessions for that user. This is useful in the case of unauthorised access to the account. The module...