2 matches found
CVE-2024-48887-FortiSwitch-Exploit
CVE-2024-48887-FortiSwitch-Exploit ๐จ FortiSwitch CVE-2024-48887 PoC JavaScript ๐จ ๐ฅ ๋ฐฉ๊ธ ๊ฐ๋ฒผ์ด JavaScript ์ค๋ํซ์ ๊ณต๊ฐํ์ต๋๋ค. ์ทจ์ฝํ Fortinet FortiSwitch GUI ์๋ํฌ์ธํธ์์ ์ธ์ฆ ์์ด ๋น๋ฐ๋ฒํธ ๋ณ๊ฒฝ์ด ์ด๋ป๊ฒ ํธ๋ฆฌ๊ฑฐ๋ ์ ์๋์ง ๋ณด์ฌ์ค๋๋ค. ๐ ๏ธ ์ทจ์ฝ์ ์ ๋ณด: ๊ณต๊ฒฉ์๋ ๊ฐ๋จํ fetch ์์ฒญ์ ๊ตฌ์ฑํ์ฌ ์ธ์ฆ ์์ด ๋น๋ฐ๋ฒํธ ์ค์ ์ ์กฐ์ํ ์ ์์ผ๋ฉฐ, /changepass ์๋ํฌ์ธํธ ๋ณํ์ ์ง์ ๋์์ผ๋ก ํฉ๋๋ค. root@kitploit:...
CVE-2022-22560
Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...