https://vulnerability.circl.lu/sightings/feed 2026-09-17T13:28:50.370685+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/132effae-22ee-4cc3-beb3-a42c5e1322d2/export 2026-09-17T13:28:50.390822+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "132effae-22ee-4cc3-beb3-a42c5e1322d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/ViralCyber/26255", "content": "\ud83d\udd3c \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f \u06af\u0627\u0631\u062a\u0646\u0631 \u0627\u0632 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u0647\u0627 \n\ud83d\udd35\u062f\u0631 \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f #\u06af\u0627\u0631\u062a\u0646\u0631 \u0645\u062d\u0635\u0648\u0644 Fortinet \u0628\u0627 \u0641\u0627\u0635\u0644\u0647 \u0642\u0627\u0628\u0644\u200c\u062a\u0648\u062c\u0647\u06cc \u062f\u0631 \u0628\u062e\u0634 Leaders \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647. Fortinet \u0637\u06cc \u0633\u0627\u0644\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u0627\u06a9\u0648\u0633\u06cc\u0633\u062a\u0645 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 FortiGate\u060c FortiManager\u060c FortiAnalyzer\u060c FortiClient \u0648 FortiSASE \u0633\u0627\u062e\u062a\u0647 \u0648 FortiGate \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc Enterprise \u0648 \u062f\u06cc\u062a\u0627\u0633\u0646\u062a\u0631\u0647\u0627 \u0628\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u062a\u0628\u062f\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0646\u06cc\u0632 FortiGate \u062d\u0636\u0648\u0631 \u0628\u0633\u06cc\u0627\u0631 \u067e\u0631\u0631\u0646\u06af\u06cc \u062f\u0627\u0631\u062f \u0648 \u062a\u062e\u0645\u06cc\u0646 \u0632\u062f\u0647 \u0645\u06cc\u0634\u0648\u062f \u0628\u06cc\u0634\u062a\u0631\u06cc\u0646 \u0633\u0647\u0645 \u0627\u0632 \u0628\u0627\u0632\u0627\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 Fortinet \u0627\u0633\u062a. \u0647\u0645\u06cc\u0646 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0648 \u0633\u0647\u0645 \u0628\u0627\u0632\u0627\u0631 \u0628\u0627\u0644\u0627\u060c Fortinet \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0647\u062f\u0641 \u0628\u0633\u06cc\u0627\u0631 \u062c\u0630\u0627\u0628 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0647\u0645 \u062a\u0628\u062f\u06cc\u0644 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0686\u0646\u062f \u0633\u0627\u0644 \u0627\u062e\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645 \u0645\u062a\u0639\u062f\u062f\u06cc \u062f\u0631 FortiOS\u060c FortiProxy \u0648 FortiManager \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0627\u0632 \u062c\u0645\u0644\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 Authentication Bypass\u060c Remote Code Execution \u0648 \u062a\u0635\u0627\u062d\u0628 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0631\u062f\u0646\u062f \u0648 \u0628\u0639\u0636\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0631\u0633\u0645\u0627\u064b \u0648\u0627\u0631\u062f \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc Exploited-in-the-Wild \u0622\u0698\u0627\u0646\u0633 CISA \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0645\u0627\u0646\u0646\u062f CVE-2024-21762\u060c CVE-2024-55591 \u0648 CVE-2025-24472. \n\ud83d\udd35\u0627\u06af\u0631 \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u0647\u0627\u06cc \u0641\u0631\u0627\u0648\u0627\u0646 \u0645\u062d\u0635\u0648\u0644\u0627\u062a FortiGate \u062a\u0648\u062c\u0647 \u06a9\u0627\u0641\u06cc \u0646\u0634\u0648\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0627\u06cc\u0646 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062a\u0627\u0645\u06cc\u0646 \u06a9\u0646\u0646\u062f\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u0632\u0645\u0627\u0646 \u0646\u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f \u0628\u0644\u06a9\u0647 \u062a\u0628\u062f\u06cc\u0644 \u0628\u0647 \u0646\u0642\u0637\u0647 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u0634\u0631\u06a9\u062a Fortinet \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0633\u062a\u0645\u0631 Advisory\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc FortiOS \u0648 \u0633\u0627\u06cc\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. (fortiguard.com)\n\ud83d\udd35\u062f\u0631 \u0628\u062e\u0634 Leader\u0647\u0627 \u0646\u0627\u0645 Palo Alto \u0647\u0645 \u062f\u06cc\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0633\u0647\u0645 \u0628\u0633\u06cc\u0627\u0631 \u06a9\u0645\u06cc \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062f\u0627\u0631\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0647\u0645 \u0628\u0631\u0646\u062f Check Point \u0627\u0633\u0631\u0627\u0626\u06cc\u0644\u06cc \u0647\u0645 \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u0627 \u0635\u0641\u0631 \u0627\u0633\u062a. \n#Fortinet #FortiGate #Firewall #NetworkSecurity #CyberSecurity #FortiOS #\u0627\u0645\u0646\u06cc\u062a_\u0634\u0628\u06a9\u0647 #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-17T01:00:04.742924Z"} 2026-09-17T01:00:04.742924+00:00 https://vulnerability.circl.lu/sighting/ebfaab0a-0e1c-4c16-a409-a548a23121c8/export 2026-09-17T13:28:50.394155+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ebfaab0a-0e1c-4c16-a409-a548a23121c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/ViralCyber/26255", "content": "\ud83d\udd3c \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f \u06af\u0627\u0631\u062a\u0646\u0631 \u0627\u0632 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u0647\u0627 \n\ud83d\udd35\u062f\u0631 \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f #\u06af\u0627\u0631\u062a\u0646\u0631 \u0645\u062d\u0635\u0648\u0644 Fortinet \u0628\u0627 \u0641\u0627\u0635\u0644\u0647 \u0642\u0627\u0628\u0644\u200c\u062a\u0648\u062c\u0647\u06cc \u062f\u0631 \u0628\u062e\u0634 Leaders \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647. Fortinet \u0637\u06cc \u0633\u0627\u0644\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u0627\u06a9\u0648\u0633\u06cc\u0633\u062a\u0645 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 FortiGate\u060c FortiManager\u060c FortiAnalyzer\u060c FortiClient \u0648 FortiSASE \u0633\u0627\u062e\u062a\u0647 \u0648 FortiGate \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc Enterprise \u0648 \u062f\u06cc\u062a\u0627\u0633\u0646\u062a\u0631\u0647\u0627 \u0628\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u062a\u0628\u062f\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0646\u06cc\u0632 FortiGate \u062d\u0636\u0648\u0631 \u0628\u0633\u06cc\u0627\u0631 \u067e\u0631\u0631\u0646\u06af\u06cc \u062f\u0627\u0631\u062f \u0648 \u062a\u062e\u0645\u06cc\u0646 \u0632\u062f\u0647 \u0645\u06cc\u0634\u0648\u062f \u0628\u06cc\u0634\u062a\u0631\u06cc\u0646 \u0633\u0647\u0645 \u0627\u0632 \u0628\u0627\u0632\u0627\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 Fortinet \u0627\u0633\u062a. \u0647\u0645\u06cc\u0646 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0648 \u0633\u0647\u0645 \u0628\u0627\u0632\u0627\u0631 \u0628\u0627\u0644\u0627\u060c Fortinet \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0647\u062f\u0641 \u0628\u0633\u06cc\u0627\u0631 \u062c\u0630\u0627\u0628 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0647\u0645 \u062a\u0628\u062f\u06cc\u0644 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0686\u0646\u062f \u0633\u0627\u0644 \u0627\u062e\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645 \u0645\u062a\u0639\u062f\u062f\u06cc \u062f\u0631 FortiOS\u060c FortiProxy \u0648 FortiManager \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0627\u0632 \u062c\u0645\u0644\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 Authentication Bypass\u060c Remote Code Execution \u0648 \u062a\u0635\u0627\u062d\u0628 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0631\u062f\u0646\u062f \u0648 \u0628\u0639\u0636\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0631\u0633\u0645\u0627\u064b \u0648\u0627\u0631\u062f \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc Exploited-in-the-Wild \u0622\u0698\u0627\u0646\u0633 CISA \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0645\u0627\u0646\u0646\u062f CVE-2024-21762\u060c CVE-2024-55591 \u0648 CVE-2025-24472. \n\ud83d\udd35\u0627\u06af\u0631 \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u0647\u0627\u06cc \u0641\u0631\u0627\u0648\u0627\u0646 \u0645\u062d\u0635\u0648\u0644\u0627\u062a FortiGate \u062a\u0648\u062c\u0647 \u06a9\u0627\u0641\u06cc \u0646\u0634\u0648\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0627\u06cc\u0646 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062a\u0627\u0645\u06cc\u0646 \u06a9\u0646\u0646\u062f\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u0632\u0645\u0627\u0646 \u0646\u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f \u0628\u0644\u06a9\u0647 \u062a\u0628\u062f\u06cc\u0644 \u0628\u0647 \u0646\u0642\u0637\u0647 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u0634\u0631\u06a9\u062a Fortinet \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0633\u062a\u0645\u0631 Advisory\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc FortiOS \u0648 \u0633\u0627\u06cc\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. (fortiguard.com)\n\ud83d\udd35\u062f\u0631 \u0628\u062e\u0634 Leader\u0647\u0627 \u0646\u0627\u0645 Palo Alto \u0647\u0645 \u062f\u06cc\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0633\u0647\u0645 \u0628\u0633\u06cc\u0627\u0631 \u06a9\u0645\u06cc \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062f\u0627\u0631\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0647\u0645 \u0628\u0631\u0646\u062f Check Point \u0627\u0633\u0631\u0627\u0626\u06cc\u0644\u06cc \u0647\u0645 \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u0627 \u0635\u0641\u0631 \u0627\u0633\u062a. \n#Fortinet #FortiGate #Firewall #NetworkSecurity #CyberSecurity #FortiOS #\u0627\u0645\u0646\u06cc\u062a_\u0634\u0628\u06a9\u0647 #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-16T09:00:03.933651Z"} 2026-09-16T09:00:03.933651+00:00 https://vulnerability.circl.lu/sighting/02d87a9d-4617-4b07-8f3d-eb7cf62698d2/export 2026-09-17T13:28:50.394357+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "02d87a9d-4617-4b07-8f3d-eb7cf62698d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/jSo3BLt_ji8WL8Jz_poAsvn5R_eNVyzlPYUOFO3u5_ByovA", "content": "", "creation_timestamp": "2026-09-15T00:00:25.677226Z"} 2026-09-15T00:00:25.677226+00:00 https://vulnerability.circl.lu/sighting/c2f9d034-eaa4-43b5-8a40-b1125ea78600/export 2026-09-17T13:28:50.394468+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c2f9d034-eaa4-43b5-8a40-b1125ea78600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "Telegram/jSo3BLt_ji8WL8Jz_poAsvn5R_eNVyzlPYUOFO3u5_ByovA", "content": "", "creation_timestamp": "2026-09-14T08:00:05.805483Z"} 2026-09-14T08:00:05.805483+00:00 https://vulnerability.circl.lu/sighting/ea672f05-8ecd-4253-8523-aae43e2cd011/export 2026-09-17T13:28:50.394577+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ea672f05-8ecd-4253-8523-aae43e2cd011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2024-55591-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uLl0a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 15:06:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-13T00:00:57.458090Z"} 2026-09-13T00:00:57.458090+00:00 https://vulnerability.circl.lu/sighting/1935cba8-34b5-4adf-9b9d-cb753e543b30/export 2026-09-17T13:28:50.394733+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1935cba8-34b5-4adf-9b9d-cb753e543b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2024-55591-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uLl0a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 15:06:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-12T04:00:05.331455Z"} 2026-09-12T04:00:05.331455+00:00 https://vulnerability.circl.lu/sighting/393967df-5ce1-4b61-bc54-a2eae1fecb4b/export 2026-09-17T13:28:50.394844+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "393967df-5ce1-4b61-bc54-a2eae1fecb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvbrtyqe2o2v", "content": "Fortinet VPNs Get Bludgeoned While Everyone Pretends This Is Fine\nPANIC 82% | Lag 0.0h | Gunra ransomware is being associated with exploitation of Fortinet VPN appliances via CVE-2024-55591\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-12T00:05:04.961438Z"} 2026-09-12T00:05:04.961438+00:00 https://vulnerability.circl.lu/sighting/e66f7faa-44d1-4904-bc41-520e31782560/export 2026-09-17T13:28:50.394950+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e66f7faa-44d1-4904-bc41-520e31782560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cleo_rce_cve_2024_55956.rb", "content": "{\"aliases\": [], \"arch\": \"java, cmd\", \"author\": [\"sfewer-r7\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated file write vulnerability in Cleo LexiCom, VLTrader, and Harmony\\n versions 5.8.0.23 and below.\", \"disclosure_date\": \"2024-12-09\", \"fullname\": \"exploit/multi/http/cleo_rce_cve_2024_55956\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Cleo LexiCom, VLTrader, and Harmony Unauthenticated Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/cleo_rce_cve_2024_55956.rb\", \"platform\": \"Java,Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/cleo_rce_cve_2024_55956\", \"references\": [\"CVE-2024-55956\", \"URL-https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update-CVE-2024-55956\", \"URL-https://attackerkb.com/topics/geR0H8dgrE/cve-2024-55956/rapid7-analysis\", \"URL-https://www.rapid7.com/blog/post/2024/12/10/etr-widespread-exploitation-of-cleo-file-transfer-software-cve-2024-50623/\", \"URL-https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild\"], \"rport\": 5080, \"session_types\": false, \"targets\": [\"Java\", \"Windows Command\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:44.235876Z"} 2026-09-08T06:49:44.235876+00:00 https://vulnerability.circl.lu/sighting/c0800a32-9241-47a9-80b8-601c114c5aef/export 2026-09-17T13:28:50.395098+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c0800a32-9241-47a9-80b8-601c114c5aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"h00die-gr3y \", \"R\\u00e9mi Matasse\", \"Micka\\u00ebl Benassouli\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"InvoiceShelf is an open-source web & mobile app that helps you track expenses, payments, create professional\\n invoices & estimates and is based on the PHP framework Laravel.\\n InvoiceShelf has a Remote Code Execution vulnerability that allows remote unauthenticated attackers to conduct\\n PHP deserialization attacks. This is possible when the `SESSION_DRIVER=cookie` option is set on the default\\n InvoiceShelf .env file meaning that any session will be stored as a ciphered value inside a cookie.\\n These sessions are made from a specially crafted JSON containing serialized data which is then ciphered using\\n Laravel's encrypt() function.\\n An attacker in possession of the `APP_KEY` would therefore be able to retrieve the cookie, uncipher it and modify\\n the serialized data in order to get arbitrary deserialization on the affected server, allowing them to achieve\\n remote command execution. InvoiceShelf version `1.3.0` and lower is vulnerable.\\n As it allows remote code execution, adversaries could exploit this flaw to execute arbitrary commands,\\n potentially resulting in complete system compromise, data exfiltration, or unauthorized access\\n to sensitive information.\", \"disclosure_date\": \"2024-12-13\", \"fullname\": \"exploit/linux/http/invoiceshelf_unauth_rce_cve_2024_55556\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"InvoiceShelf unauthenticated PHP Deserialization Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/invoiceshelf_unauth_rce_cve_2024_55556\", \"references\": [\"CVE-2024-55556\", \"URL-https://attackerkb.com/topics/25C8UQRPhx/cve-2024-55556\", \"URL-https://www.synacktiv.com/advisories/crater-invoice-unauthenticated-remote-command-execution-when-appkey-known\"], \"rport\": 90, \"session_types\": false, \"targets\": [\"PHP\", \"Unix/Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.856135Z"} 2026-09-08T06:48:38.856135+00:00 https://vulnerability.circl.lu/sighting/b1724b1c-658d-4ca1-ae00-b97c8e93f072/export 2026-09-17T13:28:50.395232+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b1724b1c-658d-4ca1-ae00-b97c8e93f072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invoiceninja_unauth_rce_cve_2024_55555.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"h00die-gr3y \", \"R\\u00e9mi Matasse\", \"Micka\\u00ebl Benassouli\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Invoice Ninja is a free invoicing software for small businesses, based on the PHP framework Laravel.\\n A Remote Code Execution vulnerability in Invoice Ninja (>= 5.8.22 <= 5.10.10) allows remote unauthenticated\\n attackers to conduct PHP deserialization attacks via endpoint `/route/` which accepts a Laravel\\n ciphered value which is unsafe unserialized, if an attacker has access to the APP_KEY.\\n As it allows remote code execution, adversaries could exploit this flaw to execute arbitrary commands,\\n potentially resulting in complete system compromise, data exfiltration, or unauthorized access\\n to sensitive information.\", \"disclosure_date\": \"2024-12-13\", \"fullname\": \"exploit/linux/http/invoiceninja_unauth_rce_cve_2024_55555\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Invoice Ninja unauthenticated PHP Deserialization Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/invoiceninja_unauth_rce_cve_2024_55555.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/invoiceninja_unauth_rce_cve_2024_55555\", \"references\": [\"CVE-2024-55555\", \"URL-https://attackerkb.com/topics/QtMS7cIExH/cve-2024-55555\", \"URL-https://www.synacktiv.com/advisories/invoiceninja-unauthenticated-remote-command-execution-when-appkey-known\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"PHP\", \"Unix/Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.753130Z"} 2026-09-08T06:48:38.753130+00:00