Skip to content

FortiSandbox Detect#15918

Merged
ritikchaddha merged 6 commits intoprojectdiscovery:mainfrom
rxerium:fortisandbox-detect
Apr 19, 2026
Merged

FortiSandbox Detect#15918
ritikchaddha merged 6 commits intoprojectdiscovery:mainfrom
rxerium:fortisandbox-detect

Conversation

@rxerium
Copy link
Copy Markdown
Contributor

@rxerium rxerium commented Apr 15, 2026

PR Information

FortiSandbox Detect

  • Fixed CVE-2020-XXX / Added CVE-2020-XXX / Updated CVE-2020-XXX
  • References:

Template validation

  • Validated with a host running a vulnerable version and/or configuration (True Positive)
  • Validated with a host running a patched version and/or configuration (avoid False Positive)

Additional Details (leave it blank if not applicable)

Additional References:

rxerium and others added 4 commits April 14, 2026 20:55
- Match on <title>FortiSandbox and HTTP 200 status
- Target path: /ng/login?returnUrl=%2F
- Shodan query: http.title:"FortiSandbox"

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@neo-by-projectdiscovery-dev
Copy link
Copy Markdown
Contributor

neo-by-projectdiscovery-dev Bot commented Apr 15, 2026

Neo - Nuclei Template Review

No security issues found

Hardening Notes
  • The returnUrl parameter in the request path is used for detection purposes and does not exploit or test for open redirect vulnerabilities
  • Template properly scoped as 'info' severity for discovery/reconnaissance use case

Comment @pdneo help for available commands. · Open in Neo

@theamanrawat theamanrawat added the Done Ready to merge label Apr 15, 2026
@ritikchaddha ritikchaddha merged commit adb6b32 into projectdiscovery:main Apr 19, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Done Ready to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants