cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN 预认证远程代码执行 描述 CVE-2022-42475 是 FortiOS SSL VPN 服务中的一个基于堆的缓冲区溢出漏洞，允许未认证的攻击者通过向 /remote/error 端点发送特制的 HTTP 请求来远程执行任意代码（RCE）。 该漏洞在官方补丁发布之前已被在野积极利用（0-day）。 PoC 执行 以下截图展示了在授权实验室环境中执行 PoC 的画面： 输出展示了 PoC 的执行过程以及与用于测试的 FortiOS 实例的交互。 CVE 信息 字段| 值 ---|--- CVE ID|...

cve-2024-21762-check

Comprobación de CVE-2024-21762 Detecte de forma segura si una VPN SSL de FortiGate es vulnerable a CVE-2024-21762. Para más información, consulte esta publicación del blog de Bishop Fox Uso root@kitploit: python3 check-cve-2024-21762.py En la mayoría de los casos, el script mostrará "Vulnerable" ...

cve-2022-42475

Vulnerabilidad de desbordamiento de búfer en SSL-VPN de FortiOS cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 Código POC para explotar el desbordamiento de montón Heap overflow en el demonio SSLVPN de Fortinet Notas Este es un POC rápido y sucio que probablemente no funcione en...

CVE-2018-13379

使用方法&免责声明 该脚本为Fortinet FortiOS路径遍历漏洞 （CVE-2018-13379）批量检测脚本。 使用方法：Python CVE-2018-13379.py url.txt 漏洞地址输出在vul.txt中 影响版本： Fortinet FortiOS 5.6.3 - 5.6.7、6.0.0 - 6.0.4 版本中的SSL VPN 受此漏洞影响。 漏洞源于该系统未能正确地过滤资源或文件路径中的特殊元素，导致攻击者可以利用该漏洞访问受限目录以外的位置。 工具仅用于安全人员安全测试，任何未授权检测造成的直接或者间接的后果及损失，均由使用者本人负责...

pwn-pulse

pwn-pulse.sh 针对Pulse Connect Secure SSL VPN任意文件读取漏洞CVE-2019-11510的利用工具 脚本由braindead @BishopFox编写。基于Orange Tsai和Meh Chang的研究。同时感谢Alyssa Herrera和0xDezzy提供的额外见解。特别感谢bl4ckh0l3z对代码进行了大幅修复、清理和重构！ 该脚本通过CVE-2019-11510下载Pulse Connect Secure VPN文件，并从中提取私钥、用户名、管理员详情（包括会话cookie）以及观察到的登录信息（包括密码）。...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html https://fortiguard.com/psirt/FG-IR-18-384 以下版本的 FortiOS 存在漏洞。 root@kitploit: FortiOS 5.6.3 to 5.6.7 FortiOS 6.0.0 to 6.0.4 ONLY if the SSL VPN service web-mode or tunnel-mode ...

patch-CVE-2026-12087

Patch: CVE-2026-12087 Vulnerability Details CVE : CVE-2026-12087 Product : Fortinet FortiOS Description : Heap overflow in SSL-VPN Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-05-10 Status| deployed Deployed To| Production Validated By| SecOps Team References N...

NachoVPN

NachoVPN 🌮🔒 NachoVPN 是一个概念验证（Proof of Concept）项目，演示了如何通过恶意 VPN 服务器利用 SSL-VPN 客户端。 它采用基于插件的架构，使社区能够为更多 SSL-VPN 产品贡献支持。目前支持多种流行的企业 VPN 产品，例如 Cisco AnyConnect、SonicWall NetExtender、Palo Alto GlobalProtect 和 Ivanti Connect Secure。 有关更多详细信息，请参阅我们的博客文章，以及 HackFest Hollywood 2024 演讲幻灯片|视频。 安装 先决条件 Pytho...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

FortiGate SSL-VPN kit recovered in the wild Research arch...

Cisco Firewall Threat Defense (FTD) Software Remote Access SSL VPN DoS (cisco-sa-asaftd-vpn-dos-dzv4mQFF)

According to its self-reported version, the Cisco Secure Firewall Threat Defense FTD Software is affected by a denial of service vulnerability. A flaw exists due to insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can exploit this issue, via a crafted...

Cisco Adaptive Security Appliance (ASA) Remote Access SSL VPN DoS (cisco-sa-asaftd-vpn-dos-dzv4mQFF)

According to its self-reported version, the Cisco ASA software is affected by a denial of service vulnerability. A flaw exists due to insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can exploit this issue, via a crafted HTTP request to the Remote...

The vulnerability of the Remote Access SSL VPN microprogramming network interface device of Cisco Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the Remote Access SSL VPN microprogramming network interface device of Cisco Adaptive Security Appliance ASA and Cisco Secure Firewall Threat Defense FTD is related to improper cleaning of dynamic memory. Exploiting this vulnerability allows a malicious actor to cause service...

CVE-2026-20349

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

EUVD-2026-56643

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

CVE-2026-20349

The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...

CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

VulnCheck KEV: CVE-2026-20349

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

PT-2026-70366

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA affected versions not specified Cisco Secure Firewall Threat Defense FTD affected versions not specified Description Insufficient error checking when processing HTTP requests in the Remote...

VulnCheck KEV: CVE-2025-62631

An insufficient session expiration vulnerability CWE-613 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's passwor...