Ashish Kunwar

Results 7 issues of Ashish Kunwar

BIG-IP supports iRules - a subset of rules written in TCL. An attacker can inject iRule code in to a request and force a BIG-IP to execute remote code, sniff...

add detection of jexl injection and Hubl Injection

PoC here https://github.com/jas502n/St2-057/blob/master/README.md

**OS command injection vulnerability in FortiWeb's management interface (version 6.3.11 and prior) can allow a remote, authenticated attacker to execute arbitrary commands on the system, via the SAML server configuration...

Status: Review Needed
Type: Discussion

it would be really awesome if you add Nuclei-Engine Integration to scan with nuclei yaml templates for vulnerabilties. https://github.com/projectdiscovery/nuclei

POC https://app.any.run/tasks/eaf25500-3e11-40f0-a2b4-b4f1c8a185c9

enhancement
CVE-based