Lucene search
+L

923 matches found

Kitploit
Kitploit
•added 2026/10/29 3:54 a.m.•25 views

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — Detection & Response Kit Detection, hunting, and remediation resources for CVE-2026-76461 , a critical SQL injection vulnerability in Cisco AsyncOS for Cisco Secure Email Gateway SEG. ⚠️ Disclaimer This repository contains defensive content only : Sigma rules, YARA rules, technica...

9.8CVSS8.9AI score0.29543EPSS
SaveExploits4References7
Kitploit
Kitploit
•added 2026/10/29 3:54 a.m.•19 views

CVE-2026-76461

⚡ CVE-2026-76461 - Critical SQL Injection A critical, remotely exploitable SQL injection vulnerability in Cisco Secure Email Gateway's email parsing...

9.8CVSS9.2AI score0.29543EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/10/29 1:28 a.m.•24 views

CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 Scanner Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – All Rights Reserved Authorized under CYBERDUDEBIVASH AUTHORITY – Ethical detection tool for CVE-2025-20393 unauthenticated RCE in Cisco Secure Email Gateway / SMA. This tool helps identify exposure t...

10CVSS9.3AI score0.32392EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/28 9:56 p.m.•27 views

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

10CVSS9.6AI score0.32392EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/28 8:43 p.m.•28 views

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

7.2CVSS7.8AI score0.02227EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/28 7:17 p.m.•22 views

cisco-CVE-2023-20075

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Local Privilege Escalation and Shell Escape CVE: CVE-2023-20075 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

6.7CVSS7.5AI score0.00877EPSS
SaveExploits1
KittySploit
KittySploit
•added 2026/10/05 2:20 p.m.•10 views

Cisco Secure Email Gateway SQLi Chain (CVE-2026-76461)

Targets CVE-2026-76461 pre-authentication SQL injection in Cisco Secure Email Gateway AsyncOS email parsing. Confirms vulnerable AsyncOS builds via the management portal and documents SMTP-side exploitation TCP/25. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Secure Email Gateway AsyncOS SQ...

9.8CVSS8.7AI score0.29543EPSS
SaveExploits4References2
KittySploit
KittySploit
•added 2026/09/29 10:07 a.m.•8 views

Cisco Secure Email CVE-2026-76461 Detect

Detects on-prem Cisco Secure Email Gateway AsyncOS appliances exposed to CVE-2026-76461 pre-authentication SQL injection in email parsing. Fingerprints the ESA/IronPort login panel and parses AsyncOS release markers to flag branches before fixed builds 15.5.5-014 / 16.0.4-302 / 16.5.0-780...

9.8CVSS8.6AI score0.29543EPSS
SaveExploits4References3
GithubExploit
GithubExploit
•added 2026/09/17 12:47 p.m.•40 views

Exploit for SQL Injection in Cisco Asyncos

CVE-2026-76461 Vulnerability Exercise This project contains a...

9.8CVSS8.8AI score0.29543EPSS
SaveExploits4
GithubExploit
GithubExploit
•added 2026/09/15 2:33 p.m.•45 views

Exploit for SQL Injection in Cisco Asyncos

CVE-2026-76461 — Detection & Response Kit Detection, hunting,...

9.8CVSS8.7AI score0.29543EPSS
SaveExploits4
The Hacker News
The Hacker News
•added 2026/09/15 6:11 a.m.•38 views

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461 , carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of...

9.8CVSS8.7AI score0.29543EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
•added 2026/09/15 12:00 a.m.•18 views

Cisco AsyncOS Email Analysis Arbitrary Command Execution

The vulnerability of the email analysis mechanism of Cisco AsyncOS operating system in Cisco Secure Email protection solutions is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with roo...

10CVSS7.6AI score0.29543EPSS
SaveExploits4References7Affected Software2
NCSC
NCSC
•added 2026/09/14 6:27 p.m.•38 views

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway. This vulnerability lies in the processing of email messages within the Cisco AsyncOS software for Cisco Secure Email Gateway. It arises due to insufficient validation of incoming email messages. An unauthorized malicious actor ca...

9.8CVSS9.1AI score0.29543EPSS
SaveExploits4References1
Vulnrichment
Vulnrichment
•added 2026/09/14 4:09 p.m.•40 views

CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

9.8CVSS9.1AI score0.29543EPSS
SaveExploits4References1
Cvelist
Cvelist
•added 2026/09/14 4:09 p.m.•298 views

CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

9.8CVSS0.29543EPSS
SaveExploits4References1
Cisco
Cisco
•added 2026/09/14 4:00 p.m.•31 views

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

9.8CVSS9.1AI score0.29543EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•13 views

CVE-2026-76461: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

9.8CVSS9.1AI score0.29543EPSS
SaveExploits4References4
VulnCheck KEV
VulnCheck KEV
•added 2026/09/14 12:00 a.m.•14 views

VulnCheck KEV: CVE-2026-76461

Cisco AsyncOS software for Cisco Secure Email Gateway SEG contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system...

9.8CVSS8.9AI score0.29543EPSS
SaveIn wildExploits4References3
Packet Storm
Packet Storm
•added 2026/07/07 12:00 a.m.•93 views

📄 Cisco AsyncOS 14.2.0 Code Execution

ESA Cisco Secure Email and Cisco Secure Email and Web Manager with Cisco AsyncOS version 14.2.0 allows an authenticated user with permissions to SNMP-config that ability to execute arbitrary code as root using a specially crafted SNMP trap config. This is for an older issue from 2023. About...

7.2CVSS7.7AI score0.02227EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2026/07/07 12:00 a.m.•96 views

📄 Cisco AsyncOS 14.2.0 Privilege Escalation / Local Root

Cisco AsyncOS version 14.2.0 local privilege escalation details that achieve a local root shell. About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Local Privilege Escalation and Shell...

6.7CVSS7AI score0.00877EPSS
SaveExploits1
Rows per page
Query Builder