CVE-2024-7593

CVE-2024-7593 描述： CVE-2024-7593 是一个影响多个 Pulse Secure 产品（包括 Pulse Secure VPN）的严重漏洞。该漏洞允许具有管理界面访问权限的已认证攻击者在受影响的服务器上执行任意命令。这可能导致恶意代码的执行，从而破坏系统的完整性和可用性。 技术详情 类型：远程代码执行（RCE）。 严重性：严重（CVSS：9.8）。 受影响版本：特定版本的 Pulse Secure VPN 受到影响；请查阅 Pulse Secure 的安全公告以获取详细信息。 潜在影响 利用此漏洞的攻击者可能： 完全控制受影响的服务器。 重定向流量或操纵数据。...

CVE-2020-8250

CVE-2020-8250：通过命令注入在 Pulse Secure VPN Linux 客户端中实现权限提升 root SUID 可执行文件 pulsesvc 中有一个名为“doupload”的函数，该函数会不安全地将“HOME”环境变量传递给“system”。通过将“HOME”变量修改为包含特殊 shell 字符（例如：“”或“$”），攻击者可以在调用“doupload”时注入任意命令，并将其权限提升至 root。 NVD 披露： 该漏洞的 NVD 披露可在此处查看。 要求： 该漏洞利用针对的是客户端认证后才会访问到的代码，这意味着要利用此漏洞，攻击者需要满足以下 3 种场景之一：...

CVE-2020-8249

CVE-2020-8249：Pulse Secure VPN Linux 客户端中的缓冲区溢出 根 SUID 可执行文件 pulsesvc 中有一个函数 “doupload”，它不安全地调用 “sprintf”，这可能导致缓冲区溢出。由于 “sprintf” 将值写入堆栈，如果向其传递足够大的字符串，则可能覆盖堆栈上合法的返回地址。 NVD 披露： 此漏洞的 NVD 披露信息可在此处找到。 要求： 该漏洞利用针对的是客户端身份验证后访问的代码，这意味着要利用此漏洞，攻击者需要满足以下三种情况之一： 托管一个由攻击者控制的 Pulse VPN 服务器 一个有效的 SSL/TLS...

CVE-2020-8248

CVE-2020-8248: Pulse Secure VPN Linux客户端中通过Zip通配符利用的权限提升 root SUID可执行文件pulsesvc中的“doupload”函数不安全地调用了带有通配符（“”）的zip命令。通过以特定方式构造文件名，在用户控制文件夹（“/.pulsesecure/pulse/”）中写入文件，攻击者可以滥用通配符向“zip”可执行文件传递自定义标志，从而实现代码执行。 NVD披露： 此漏洞的NVD披露信息可在此查看。 要求： 该漏洞利用针对客户端认证后访问的代码，这意味着要利用此漏洞，攻击者需要满足以下三种场景之一： 托管一个攻击者控制的Pulse...

CVE-2024-7593

CVE-2024-7593 説明: CVE-2024-7593 は、Pulse Secure VPN を含む複数の Pulse Secure 製品に影響を与える重大な脆弱性です。この脆弱性により、管理インターフェースにアクセスできる認証済みの攻撃者が、影響を受けるサーバー上で任意のコマンドを実行できる可能性があります。これにより、悪意のあるコードが実行され、システムの完全性と可用性が損なわれる可能性があります。 技術的詳細 種別: リモートコード実行 RCE。 深刻度: 重大 CVSS: 9.8。 影響を受けるバージョン: Pulse Secure VPN...

CVE-2025-58074

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges...

CVE-2025-58074

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges...

CVE-2025-58074 Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges...

CVE-2025-58074

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges...

CVE-2025-58074

This CVE concerns Norton Secure VPN installation via the Microsoft Store. A privilege-escalation exists when installing Norton Secure VPN, where an unprivileged user can influence the installation by manipulating a writable 7z payload in C:\ProgramData\NortonInstaller\Settings before setup runs. ...

CVE-2025-58074 Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges...

PT-2026-36800

Name of the Vulnerable Software and Affected Versions Norton Secure VPN affected versions not specified Description A privilege escalation issue occurs during the installation of the software via the Microsoft Store. A low-privilege user can replace files during the installation process,...

CVE-2025-58074: Insecure Operation on Windows Junction / Mount Point

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges...

Norton Secure VPN Installation Insecure Operation On Junction Privilege Escalation Vulnerability

Talos Vulnerability Report TALOS-2025-2276 Norton Secure VPN Installation Insecure Operation On Junction Privilege Escalation Vulnerability May 4, 2026 CVE Number CVE-2025-58074 SUMMARY A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Stor...

CVE-2026-4114

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...

Siemens APE1808 Heap-based Buffer Overflow (CVE-2023-27997)

A heap-based buffer overflow vulnerability CWE-122 in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability

A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessin...

CVE-2025-62631

An insufficient session expiration flaw (CWE-613) in Fortinet FortiOS SSLVPN affects versions 7.4.0, 7.2.x, 7.0.x, and 6.4.x. After a user's password change, an active SSLVPN session may not be terminated under certain conditions, allowing an attacker to retain access to network resources. BDU co...

CVE-2025-62631

An insufficient session expiration vulnerability CWE-613 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's passwor...

CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...