CVE-2021-26088

PoC for CVE-2021-26088 用 PowerShell 编写 描述 FSSO Collector 中的认证漏洞可能允许未经认证的用户绕过任何防火墙认证规则，通过发送特制的 UDP 登录通知数据包访问受保护的网络。 https://www.fortiguard.com/psirt/FG-IR-20-191 内容 forgeauth.ps1：主要利用脚本 checksrcport.ps1：获取分配给当前用户的源端口范围 免责声明...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

Ring Makes 2-Factor Authentication Mandatory Following Recent Hacks

Smart doorbells and cameras bring a great sense of security to your home, especially when you're away, but even a thought that someone could be spying on you through the same surveillance system would shiver up your spine. Following several recent reports of hackers gaining access to people's...

DRUPAL-CONTRIB-2019-013

This module provides a field on user profiles which allows users to get a notification when their account logs in to the site. The notification e-mail includes a link which will terminate all sessions for that user. This is useful in the case of unauthorised access to the account. The module...