CVE-2022-40684

CVE-2022-40684 by 1vere$k For now it's a POC copy for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Coppied from https://github.com/horizon3ai/CVE-2022-40684 Analysis The exploit uses the simple payload: PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 Host...

vSphereyeeter

vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...

CVE-2022-40684

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS Authentication bypass Mass exploitation /api/v2/cmdb/system/admin/ "ssh-public-key1": "" ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded: for="127.0.0.1...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Tested against VMware VCSA 6.7 create ssh keypair ssh-keygen -t rsa -f vcsa.key -N '' create tarbal with ../../../../../home/vsphere-ui/.ssh/authorizedkeys python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar authorizedkeys mv evil.tar evil.ova uploa...

malicious-devfile-registry

Malicious Devfile Registry The project contains a malicious Devfile Registry usable to exploit CVE-2024-0402 in Gitlab. The Exploit A nodejs:2.2.1 stack is indexed to expose the archive.tar file exploiting the path-traversal issue in registry-support library before v1.1.0. tar location :...

CVE-2024-415770-ssrf-rce

CVE-2024-415770-SSRF-RCE Description This script is designed to interact with the teamserver. Update the script with your teamserver URL. It performs several steps to register an agent, open a socket, and inject an SSH key into the target's authorized keys. Prerequisites Python 3.x Required Pytho...

kube-alien

Kube-alien Esta herramienta lanza ataques a un clúster de k8s desde dentro. Esto significa que ya necesitas tener acceso con permisos para desplegar pods en un clúster para ejecutarlo. Después de ejecutar el pod kube-alien, intenta tomar el control de los nodos del clúster añadiendo tu clave...

CVE-2022-40684

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

CVE-2022-40684

CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Vulnerable Products FortiOS versions between 7.0.0 – 7.0.6 and 7.2.0 – 7.2.1 FortiProxy versions between 7.0.0 – 7.0.6 and version 7.2.0 FortiSwitchManager versions 7.0...

CVE-2021-21972

Usage:CVE-2021-21972.py option -u or --url: Target URL -t or --type: Payload type ssh/webshell -f or --file: File to upload webshell or authorizedkeys Example: CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p or --proxy: Set proxy Example: CVE-2021-21972.py -u https://127.0.0.1 ...

CVE-2026-20182

CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Authentication Bypass A proof-of-concept exploit for CVE-2026-20182 , a critical CVSS 10.0 authentication bypass in the vdaemon DTLS service UDP/12346 on Cisco Catalyst SD-WAN Controller vSmart and Manager vManage. Disclosed: May 14, 202...

MAL-2026-16443 Malicious code in my-company-device (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd39b4115bf373ff8f8d036f1db1cdb58e1fb3712d3330eabad7dbc5796ac4f Running npx my-company-device appends a hardcoded ssh-ed25519 public key labelled sunyiting-macmini to the installer's /.ssh/authorizedkeys mode 0o60...

CVE-2026-90767

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add endpoint, allowing customers to inject arbitrary lines into authorizedkeys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that...

CVE-2026-90767

Froxlor versions before 2.3.12 contain an SSH key injection vulnerability in the SshKeys::add() API endpoint. The root cause is improper validation of multi-line SSH public keys , allowing customers to inject arbitrary lines into authorized_keys files. An attacker can exploit this to inject malic...

CVE-2026-90767 Froxlor before 2.3.12 SSH Key Injection via authorized_keys

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add endpoint, allowing customers to inject arbitrary lines into authorizedkeys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that...

CVE-2026-90767 Froxlor before 2.3.12 SSH Key Injection via authorized_keys

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add endpoint, allowing customers to inject arbitrary lines into authorizedkeys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that...

EUVD-2026-76988

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add endpoint, allowing customers to inject arbitrary lines into authorizedkeys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that...

CVE-2026-90767 Froxlor before 2.3.12 SSH Key Injection via authorized_keys

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add endpoint, allowing customers to inject arbitrary lines into authorizedkeys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that...

PT-2026-90834

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add endpoint, allowing customers to inject arbitrary lines into authorized keys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that...