PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A Brief Look at FortiJump (FortiManager CVE-2024-47575)

bishopfox.com | vulnerability | CVE-2024-47575 | #exploit | #vulnerability | #fortimanager | #cve-2024-47575 | #fortijump | #missing-authentication
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox digs into FortiJump (CVE-2024-47575): the missing-auth flaw in FortiManager's fgfmsd exploited since June 2024 — covering FGFM internals and a Python PoC that registers rogue devices.
CVE
CVE-2024-47575
Published
Collected

Related coverage

High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
vulnerability · volexity.com
CVE-2014-6271 – Remotely Exploitable Vulnerability in Bash
With the excitement of public details of a remotely exploitable vulnerability in bash (CVE-2014-6271) coming to light today, we decided it was as good of time as any to finally […]
research · volexity.com
Afghan Government Compromise: Browser Beware
Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
Back