1058 matches found
CVE-2023-20178
CVE-2023-20178 Dies ist ein PoC für eine Schwachstelle zum Löschen beliebiger Dateien in Cisco Secure Client getestet auf Version 5.0.01242 und Cisco AnyConnect getestet auf Version 4.10.06079. Wenn ein Benutzer eine Verbindung zum VPN herstellt, wird der Prozess vpndownloader.exe im Hintergrund...
CVE-2021-1366
CVE-2021-1366 Elevazione dei privilegi locale di Cisco AnyConnect Posture HostScan: CVE-2021-1366 Una vulnerabilità nel canale di comunicazione interprocesso IPC di Cisco AnyConnect Secure Mobility Client per Windows potrebbe consentire a un attaccante locale autenticato di eseguire un attacco di...
CVE-2020-3153
CVE-2020-3153 Codice POC per CVE-2020-3153 - vulnerabilità di path traversal in Cisco anyconnect Leggi di più sulla vulnerabilità qui: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Passaggi per ottenere una shell di Windows sul desktop con...
CVE-2020-3452
CVE-2020-3452 Cisco Adaptive Security Appliance ASA e Cisco Firepower Threat Defense FTD - Attraversamento di directory di sola lettura nel servizio Web Una vulnerabilità nell'interfaccia dei servizi Web di Cisco Adaptive Security Appliance ASA Software e Cisco Firepower Threat Defense FTD Softwa...
CVE-2022-20699
CVE-2022-20699 🎧 Portato a voi da the Audiobahn Cisco Anyconnect VPN RCE non autenticato rwx stack non è stato ben verificato...
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client Prova de Conceito de Elevação de Privilégio Agradecimentos a Yorick Koster por publicar os detalhes. Isto é uma prova de conceito para uma vulnerabilidade de path traversal no Cisco AnyConnect Secure Mobility Client. Testado com Windows 7 e...
CVE-2022-20699
CVE-2022-20699 🎧 Trazido a você pelo Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack não está bem verificado...
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect 4.8.02042 escalada de privilégios através de path traversal Descrição A funcionalidade de atualização automática do Cisco AnyConnect é afetada por uma vulnerabilidade de path traversal. Um atacante pode explorar esta vulnerabilidade para obter privilégios de nível d...
CVE-2020-3433
PoCs für CVE-2020-3433, CVE-2020-3434 und CVE-2020-3435 PoCs und technische Details zu den drei Schwachstellen, die im Mai 2020 im Cisco AnyConnect Secure Mobility Client für Windows gefunden wurden: CVE-2020-3433 – Hoch CVSS-Score 7.8 – eine lokale Privilegienausweitung CVE-2020-3434 – Mittel...
Cisco ASA/FTD Software - Cross-Site Scripting
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...
DroppedConnection
DroppedConnection Emula un servizio VPN Cisco ASA Anyconnect, accettando qualsiasi credenziale e registrandole prima di servire VBS al client che viene eseguito nel contesto dell'utente. Articolo del blog:...
NachoVPN
NachoVPN 🌮🔒 NachoVPN est une preuve de concept qui démontre l'exploitation de clients SSL-VPN, à l'aide d'un serveur VPN malveillant. Il utilise une architecture basée sur des plugins afin que la prise en charge de produits SSL-VPN supplémentaires puisse être apportée par la communauté. Il prend...
CVE-2020-3452-Cisco-Scanner
CVE-2020-3452 - Scanner Cisco ASA Scansione per CVE-2020-3452 - Path Traversal non autenticato che colpisce i firewall Cisco ASA che eseguono anyconnect https://vulners.com/cve/CVE-2020-3452 Documenti di supporto:...
Cisco ASA/FTD WebVPN/AnyConnect Improper Input Validation (CVE-2020-3452)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability i...
[SECURITY] Fedora 44 Update: ocserv-1.5.0-2.fc44
OpenConnect server ocserv is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also currently experimental compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protoco...
Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...
EUVD-2012-2480
Malware in sbrugna...
EUVD-2012-2485
Malware in sbrugna...