staystaystay

staystaystay staystaystay는 CVE-2021-1585에 대한 개념 증명 익스플로잇입니다. 이는 Cisco ASA Device ManagerASDM에 영향을 미치는 중간자 공격 또는 악의적 엔드포인트 RCE 문제입니다. 이 문제는 원래 Malcolm Lashley에 의해 발견되어 2021년 여름에 공개되었습니다. 하지만 제가 조사할 당시 최신 버전ASDM 7.171에서 패치되지 않았으며, 저는 이 문제를 독립적으로 발견했습니다. Cisco는 ASDM 7.181.152에서 이를 "수정"했습니다. 제가 "수정"이...

theway

The Way The Way는 Cisco Adaptive Security Device Manager ASDM 패키지를 언패킹, 리패킹, 그리고 생성하는 도구입니다. ASDM은 Adaptive Security Appliance ASA 시스템예: 방화벽 및 VPN을 위한 Java 기반 관리 GUI입니다. ASDM 패키지는 ASA에 호스팅되며, 관리자가 ASDM을 통해 ASA에 연결할 때마다 하위 구성 요소가 다운로드됩니다. ASA에 악성 ASDM 패키지를 심을 수 있는 공격자는 관리자 시스템에서 코드 실행을 달성할 수 있습니다. ...

cisco_asa_research

Cisco ASA 연구 이 저장소에는 Black Hat USA 2022 및 DEF CON 30에서 발표된 슬라이드와 코드가 포함되어 있습니다. 여기서 찾을 수 있는 내용은 다음과 같습니다: 슬라이드 DEF CON 30 및 Black Hat 슬라이드 데크. DEF CON 데크는 발표 시간이 더 길어서 약간 더 깁니다. theway - Cisco ASA용 악성/배포 가능한 ASDM 패키지를 생성하는 도구 CVE-2022-20829. whatsup - 악성/배포 가능한 Cisco FirePOWER 모듈 설치 패키지를 생성하는 도구...

CVE-2026-76413

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

EUVD-2026-81120

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-76413 Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-76413

A vulnerability in the Cisco ASDM single sign-on (SSO) handler for Cisco Secure FMC Software allows an unauthenticated, remote attacker to forge a session token and log in as the ASDM administrator. The root cause is improper management of the SSO token . By repeating the attack, an attacker can ...

CVE-2026-76413: Improper Restriction of Security Token Assignment

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

PT-2026-94001

Name of the Vulnerable Software and Affected Versions Cisco Secure FMC Software affected versions not specified Description An issue exists in the Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software. This flaw results from improper management of th...

EUVD-2014-2166

Malware in sbrugna...

EUVD-2022-25901

Malicious code in bioql PyPI...

CVE-2024-20494

A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

Cisco ASA ASDM Brute-force Login

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco ASA ASDM Brute-force Login', 'Description' = %q This module scans for the Cisco ASA ASDM landing page and performs login brute-force to...

CVE-2023-5553

CVE-2023-5553 affects Axis OS Secure Boot protection. The AXIS OS tampering-protection bypass is the underlying issue, enabling a sophisticated attack to bypass the device’s tamper protection. Public detail indicates affected AXIS OS ranges include versions 10.8–11.6 (per external summaries), wit...

Cisco ASA-X With FirePOWER Services Authenticated Command Injection Exploit

This Metasploit module exploits an authenticated command injection vulnerability affecting Cisco ASA-X with FirePOWER Services. This exploit is executed through the ASA's ASDM web server and lands in the FirePower Services SFR module's Linux virtual machine as the root user. Access to the virtual...

Cisco ASA-X With FirePOWER Services Authenticated Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco ASA-X with FirePOWER Services Authenticated Command Injection', 'Description' = %q This module exploits an authenticated command injection...

Cisco ASA ASDM Brute-force Login

This module scans for the Cisco ASA ASDM landing page and performs login brute-force to identify valid credentials. Module Options msf use auxiliary/scanner/http/ciscoasaasdmbruteforce msf auxiliaryciscoasaasdmbruteforce show actions ...actions... msf auxiliaryciscoasaasdmbruteforce set ACTION ms...

Metasploit Wrap-Up

Advantech iView NetworkServlet Command Injection This week Shelby Pace has developed a new exploit module for CVE-2022-2143. This module uses an unauthenticated command injection vulnerability to gain remote code execution against vulnerable versions of Advantech iView software below 5.7.04.6469...

Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER Services Software

Rapid7 discovered vulnerabilities and “non-security” issues affecting Cisco Adaptive Security Software ASA, Adaptive Security Device Manager ASDM, and FirePOWER Services Software for ASA. Rapid7 initially reported the issues to Cisco in separate disclosures in February and March 2022. Rapid7 and...

CVE-2022-20829

A vulnerability in the packaging of Cisco Adaptive Security Device Manager ASDM images and the validation of those images by Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker with administrative privileges to upload an ASDM image that contains malicious...