8 matches found
FortiSIEM Phoenix Monitor RCE (CVE-2025-64155)
CVE-2025-64155 Horizon3: Phoenix Monitor clusterurl injection writes CMD payload to /opt/charting/redishb.sh; phxctl.service runs within 1 min. !/usr/bin/env python3 -- coding: utf-8 -- """ CVE-2025-64155 — FortiSIEM Phoenix Monitor clusterurl injection → delayed RCE. Reference:...
FortiSIEM Phoenix Monitor Port Probe (CVE-2025-64155)
Checks whether TCP 7900 Phoenix Monitor TLS is reachable on the target. !/usr/bin/env python3 -- coding: utf-8 -- """Detect FortiSIEM Phoenix Monitor TLS port CVE-2025-64155.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner,...
CVE-2025-64155-hunter
CVE-2025-64155 Scanner A Python scanner for detecting the command injection vulnerability CVE-2025-64155 in Phoenix Monitor service. Description CVE-2025-64155 is a command injection vulnerability in Phoenix Monitor service that allows remote code execution through the clusterurl parameter in the...
CVE-2024-23108
CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...
CVE-2023-34992
CVE-2023-34992: Fortinet FortiSIEM Unauthenticated Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...
CVE-2024-23108
CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...
