CVE-2024-21762-Checker

CVE-2024-21762-Checker このスクリプトは、Fortinet SSL VPNのリモートコード実行脆弱性CVE-2024-21762のスキャンを行います。特定のリクエストを送信し、その応答を分析することで、指定されたサーバーがこのCVEの影響を受けるかどうかをチェックします。 詳細については、このBishop Foxのブログ記事を参照してください。 公開エクスプロイトの日付: 2024/02/28 影響を受けるバージョン: FortiOS 6.0 ～ 7.4.2 FortiOSバージョン| 影響を受けるバージョン| 推奨される対応 ---|---|--- FortiOS...

CVE-2025-40600: Use of Externally-Controlled Format String

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

The vulnerability of the ssvpn_config_mod function in the /vpn/list_vpn_web_custom.php web interface of the Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 router integrated software allows a malicious actor to execute arbitrary commands.

The vulnerability of the ssvpnconfigmod function in the /vpn/listvpnwebcustom.php web interface of the Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 router integrated software is related to the failure to eliminate special elements used in the command when processing parameters template and...

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site scripting...

Authentication flaw

Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access...