24 matches found
day08-CISCO-fmc-sim
Day08 — Cisco FMC-style Management RCE Simulation This is a minimal, educational simulation that demonstrates the impact class of a management-plane parsing RCE inspired by CVE-2025-20265. It intentionally executes commands from crafted input for local learning only. Quickstart chmod +x...
cve2025-20265
cve2025-20265 Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker. Cisco FMC CVE-2025-20265 Vulnerability Checker Safe What it does: Uses...
cve_2025_20265
PoC for CVE-2025-20265 Advisory ⚠️ WARNING This is a functional exploit for a 1-day vulnerability. It can execute code on vulnerable systems. Use only on your own internal servers you are authorized to test. Unauthorized use is illegal and unethical. Use at your own risk. You are responsible for...
CVE-2026-20265
creationtimestamp| type| source ---|---|--- 2026-06-18 13:10:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mokvncudk626 2026-07-13 20:09:05+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkiorr2f22u...
CVE-2025-20265
creationtimestamp| type| source ---|---|--- 2025-08-14 18:01:28+00:00| seen| https://t.me/kasperskyb2b/1864 2025-08-15 00:01:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwfkfn54ih26 2025-08-15 04:49:00+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2021-20265
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way memory resources were freed in the unixstreamrecvmsg function in the Linux kernel when a signal was pending. This flaw allows an...
CVE-2024-20265
A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...
CVE-2020-20265
Mikrotik RouterOs before 6.47 stable tree suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of Service due via a crafted packet...
Cisco Access Point Software Secure Boot Bypass (cisco-sa-ap-secureboot-bypass-zT5vJkSD)
According to its self-reported version, Cisco Access Point Software Secure Boot Bypass is affected by a vulnerability. - A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a...
Cisco IP Phones Stored Cross-Site Scripting (CVE-2023-20265)
A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation ...
CVE-2023-26387 ZDI-CAN-20265: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability
Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
CVE-2019-20265
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during the year 2019. Notes: none...
CVE-2022-20265
creationtimestamp| type| source ---|---|--- 2022-08-12 18:33:42+00:00| seen| https://t.me/cibsecurity/48038...
CVE-2022-20265
CVE-2022-20265 concerns Android 13 where the Settings component allows a permissions bypass that can lead to local elevation of privilege with physical access and no user interaction. Affected product: Android 13 (Settings). Root cause: a permissions bypass in the Settings flow that bypasses fact...
SUSE-SU-2021:14849-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-37159: hsofreenetdevice in drivers/net/usb/hso.c called unregisternetdev without checking for the NETREGREGISTERED state, leading to a use-after-fr...
Fix of CVE: CVE-2021-34693, CVE-2021-20292, CVE-2021-28972, CVE-2021-20265, CVE-2021-32399, CVE-2014-4508, CVE-2021-3612, CVE-2021-3178, CVE-2021-37159, CVE-2021-38205, CVE-2021-3573, CVE-2021-38160
ELSCVE-666: CVE-2021-34693: can: bcm: fix infoleak in struct bcmmsghead - ELSCVE-705: CVE-2021-38160: virtioconsole: Assure used length from device is limited - ELSCVE-769: CVE-2014-4508: x8632, entry: Do syscall exit work on badsys CVE-2014-4508 - ELSCVE-844: CVE-2021-3573: Bluetooth: use...
[Important] [Security] New kernel 2.6.32-042stab146.1; Virtuozzo 6.0 Update 12 Hotfix 54 (6.0.12-3761)
This update provides a new kernel 2.6.32-042stab146.1 for Virtuozzo 6.0. It is based on the RHEL 6.10 kernel 2.6.32-754.41.2.el6 and inherits security and stability fixes from it. The new kernel also provides an internal stability fix. Vulnerability id: CVE-2021-3347 Kernel: Use after free via PI...
CVE-2020-20265
CVE-2020-20265 affects MikroTik RouterOS before 6.47 (stable tree). The vulnerability is a memory corruption in the /ram/pckg/wireless/nova/bin/wireless process that can be triggered by a crafted packet, allowing an authenticated remote attacker to cause a Denial of Service. No remediation detail...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...