CVE-2025-1337

The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.

This PoC demonstrates a deserialization vulnerability in LogServ v1.2, allowing unauthenticated RCE via a malicious session cookie. The payload is a simple base64-encoded command, and the exploit sends it to the target URL.