Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/fevar54/cve-2025-64446-poc---fortiweb-path-traversal
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration TestingLearning & Education
GitHubfevar54/cve-2025-64446-poc---fortiweb-path-traversal

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

Proof-of-concept exploit and detection scanner for CVE-2025-64446, a critical path traversal vulnerability in Fortinet FortiWeb allowing remote command execution. Intended for educational research and authorized testing.

View Repository
7119 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-64446 PoC - FortiWeb Path Traversal

Description

Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb (CVE-2025-64446) that allows execution of administrative commands.

Technical Details

  • CVE: CVE-2025-64446
  • CVSS: 9.8 CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
  • Type: Relative Path Traversal (CWE-23)
  • Affected Software:
    • FortiWeb 8.0.0 - 8.0.1
    • FortiWeb 7.6.0 - 7.6.4
    • FortiWeb 7.4.0 - 7.4.9
    • FortiWeb 7.2.0 - 7.2.11
    • FortiWeb 7.0.0 - 7.0.11

Usage

root@kitploit:~
# Vulnerability Scanning
python3 poc.py -t <target_ip> -p <port>

# Exploitation (research only)
python3 exploit.py -t <target_ip> -p <port> --check
Download Tool