CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit Framework...

CVE-2020-3452_auto

Enum Cisco ASA via CVE-2020-3452 and download files root@kitploit: python enum.py target Convert Lua byte code using unluac root@kitploit: bash convert.sh...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-2020-3452 checker Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I would not be liable if it i...

CVE-2020-3452-PoC

CVE-2020-3452 hello Guys This is a simple script to download the nmap NSE script and put in NSE modules file and run the nmap command with and hosts you want Put your host list in list.txt file Thanks...

CVE-2020-3452

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2020-3452 Run bellow command to check CVE-2020-3452 -h Configurations 2. We integrated with the Telegram API...

CVE-2020-3452

CVE-2020-3452 Lectura de archivos sin autenticación en Cisco ASA y Cisco Firepower Saikat Karmakar | Nov : 2021 Esto comprobará si el host dado es vulnerable a CVE-2020-3452 o no Requisitos: root@kitploit: requests termcolor Uso: root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage:...

CVE-2020-3452

This repository does not have a README...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Cisco Adaptive Security Appliance Software - Local File Inclusion Vuln Test sciript Usage root@kitploit: python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP default : 80/tcp python Cisco Adaptive Security Appliance Software...

CVE-2020-3452

CVE-2020-3452 TL;DR Este es un exploit para CVE-2020-3452. No está completamente terminado aún. Úsalo en un contexto legal. Si la cagas, es tu problema. ¿Qué es esto? Este es un intento rápido y sucio de mejorar el PoC original de CVE-2020-3452. En la etapa actual, no hay nada más que un simple...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script...

MINI-3452-48J7-9QWH

Bulletin has no description...

Exploit for CVE-2023-3452

Metersploit exploit module canto RCE CVE-2024-25096 & CVE-2023...

CVE-2026-3452

creationtimestamp| type| source ---|---|--- 2026-03-04 04:16:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7gehu37527...

CVE-2026-3452

Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter. An authenticated administrator can store attacker-controlled serialized data in block configuration fields that are later passed to...

CVE-2026-3452

Concrete CMS versions below 9.4.8 are vulnerable to Remote Code Execution via stored PHP object injection in the Express Entry List block, using the columns parameter. An authenticated administrator can store attacker-controlled serialized data in block configuration fields that are later passed ...

EUVD-2026-3452

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-3452 SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupressreinstallpluginsadminajaxcb' function in all versions up to, and including, 2.3.9. This makes it possible for authenticated attackers,...

CVE-2025-3452

CVE-2025-3452 concerns the WordPress plugin SecuPress Free (versions up to and including 2.3.9). A missing capability check in the secupress_reinstall_plugins_admin_ajax_cb function allows authenticated attackers with Subscriber-level access and above to install arbitrary plugins, enabling unauth...

WordPress SecuPress Free plugin <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation vulnerability discovered by mikemyers in WordPress Plugin SecuPress Free versions = 2.3.9...

Linux Distros Unpatched Vulnerability : CVE-2010-3452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or...