390 matches found
CVE-2024-24919
CVE-2024-24919 用于检测 CVE-2024-24919 的 Nuclei 模板。CheckPoint SSLVPN 中的一个路径遍历漏洞。 顺便说一句，很棒的文章，那是我在凌晨2:00编写这个简单模板的灵感来源。 资源： https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/...
cve-2022-42475-Fortinet
cve-2022-42475 利用 Fortinet SSLVPN 守护进程中堆溢出的 POC 代码 使用方法 pip install pwntools 要使用此代码，你可以将其保存到文件中，例如 exploit.py，然后在命令行中使用 Python 运行它，并传入所需参数。以下是运行该漏洞利用程序的示例命令： python exploit.py 将 替换为目标系统的主机名或 IP 地址，将 替换为易受攻击服务的端口号，将 替换为您希望接收 shell 的机器 IP 地址。其余参数是您要执行的命令，以空格分隔。 例如，如果目标系统的 IP 地址为...
CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...
cve-2022-42475
FortiOS SSL-VPN 缓冲区溢出漏洞 cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 用于利用 Fortinet 的 SSLVPN 守护进程中堆溢出的 POC 代码 说明 这是一个快速而粗糙的 POC，除非你极其幸运，否则很可能无法在任何地方工作。它依赖于版本，并包含一些硬编码的偏移量，这些偏移量很可能因系统而异。 使用方法 python3 cve-2022-42475.py 远程主机 远程端口 本地主机 '命令' python3 cve-2022-42475.py 192.168.10.1 8443...
cve-2022-42475
cve-2022-42475 用于利用 Fortinet SSLVPN 守护进程中堆溢出的 POC 代码 注意事项 这是一个快速拼凑的 POC，除非你运气极好，否则很可能在大多数环境中都无法运行。它依赖于特定版本，并包含一些硬编码偏移量，这些偏移量极有可能因系统不同而发生变化。...
CVE-2026-4116
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...
EUVD-2026-20906
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4114: Improper Handling of Unicode Encoding
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...
CVE-2026-4116: Improper Handling of Unicode Encoding
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...
VulnCheck KEV: CVE-2024-40762
Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...
VulnCheck KEV: CVE-2025-40601
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...
CVE-2022-23989
In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...
CVE-2019-7487
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...
CVE-2025-62631: Insufficient Session Expiration
An insufficient session expiration vulnerability CWE-613 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's passwor...
Insufficient Session Expiration in SSLVPN
...
CVE-2025-40601: Stack-based Buffer Overflow
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...