锐捷SSLVPN /authUserData.cgi 路径存在未授权下载漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://stack.chaitin.com/vuldb/detail/39e64c1b-ee2c-4cc0-afdd-b2cf75985dbc

Related Vulnerabilities

• PoCwp-ssl-insecure-content-fixer-fpd: WordPress Plugin SSL Insecure Content Fixer - Full Path Disclosure
• H3C SSL VPN 安全漏洞
• AllinSSL存在默认口令
• CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File Read
• PoCCVE-2014-0160: OpenSSL Heartbleed Vulnerability
• PoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer Overflow
• PoCCVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting
• PoCCVE-2022-29383: NETGEAR ProSafe SSL VPN firmware - SQL Injection
• PoCCVE-2022-35416: H3C SSL VPN <=2022-07-10 - Cross-Site Scripting
• PoCCVE-2024-53704: SSL VPN Session Hijacking
• PoCssl-cert-renewal: SSL/TLS Certificates in AWS IAM about to expire in 30 days