CGA-Q983-RG4W-2RGG

Bulletin has no description...

cisco-rv-rce-poc

CVE-2023-20048 — PoC & Exploit per serie Cisco RV ⚠ AVVERTENZA: Solo per test autorizzati. Non utilizzare su sistemi di cui non sei proprietario o per i quali non hai autorizzazione scritta. Questo è un Proof of Concept per test autorizzati. Cos'è Piccolo repository con: CiscoPoc.py — PoC innocuo...

secpub

Cisco Nexus OS NX-OS - 명령어 "인젝션" / 입력 값 정화 문제. 발견자: Peter Adkins [email protected] 접근 권한: 로컬; 인증된 접근이 필요합니다. 추적 및 식별자: CVE - CVE-2011-2569 영향을 받는 OS: Cisco Nexus OS NX-OS 벤더 협력: 통보됨 - 일부 플랫폼에 패치 제공 / 구현됨. 영향을 받는 시스템 / 플랫폼: Nexus 7000 Nexus 5000 Nexus 4000 Nexus 3000 Nexus 2000 Nexus 1000V MD...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC mit RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

asatools

asatools Haupt-Repository, um alle Cisco-ASA-bezogenen Projekte zu pullen. Installation Auch wenn einige Unterprojekte unabhängig verwendet werden können, empfehlen wir, alle Unterprojekte mit dem folgenden einfachen Befehl zu pullen: root@kitploit: git clone --recursive...

asafw

asafw Nota preliminar: recomendamos que você use isto como parte de asatools, mas também pode ser usado de forma independente. asafw é um conjunto de scripts para lidar com firmware Cisco ASA. Ele permite que alguém descompacte o firmware necessário ao depurar com gdb, bem como...

checker-cve2020-3452

Prüfer für CVE-2020-3452 Dieses Python-Skript prüft, ob der Zielserver anfällig für CVE-2020-3452 ist. Cisco Adaptive Security Appliance und FTD – Unbefugtes Lesen entfernter Dateien Eine Schwachstelle in der Webservices-Schnittstelle der Cisco Adaptive Security Appliance ASA-Software und der Cis...

EUVD-2026-62954

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

EUVD-2026-62944

In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user...

EUVD-2026-62943

In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password by invoking the detonate file action, because the action's samplepassword parameter is not masked and is shown in...

CVE-2023-20198-Exploit

Cisco IOS XE Authentifizierungsumgehung CVE-2023-20198 Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2023-20198 , eine Schwachstelle zur Authentifizierungsumgehung, die das Cisco IOS XE Web UI betrifft. Die Schwachstelle ermöglicht es nicht authentifizierten Angreifern , über...

CVE-2026-76390

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76378

In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password by invoking the detonate file action, because the action's samplepassword parameter is not masked and is shown in...

CVE-2026-76379

In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user...

CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390

Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3 expose the add-on's OpenAPI specification through Splunk Web static file paths without requiring authentication. The root cause is that the generated OpenAPI spec is packaged in a static file path that Splunk Web serves u...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, the Talos enrichment REST endpoint accepts the destination for authenticated Splunk management requests from request data, enabling an SSRF attack. A user with the get_talos_enrichment capability can force the instanc...

CVE-2026-76389 Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

CVE-2026-76379 Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR

In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user...

CVE-2026-76379

CVE-2026-76379 is an information disclosure vulnerability in the Cisco Webex app for Splunk SOAR (versions below 2.2.1 ). The root cause is that the app does not mark the password parameter of the schedule meeting action as a password field, causing it to be displayed in cleartext in the user int...