Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 扫描器 一个基于 Python 的诊断扫描器，用于检测 Cisco ASA / FTD VPN Web 服务器缓冲区溢出漏洞（CVE-2025-20333） 。 CVE-2025-20333 是 WebVPN 文件上传处理器中的一个严重堆缓冲区溢出漏洞，成功利用后可能导致 以 root 身份远程执行代码（RCE） 。 概述 该工具通过检查易受攻击的端点（主要是文件上传处理器）是否可达，执行安全、非破坏性的测试 。它专为安全研究人员、渗透测试人员和系统管理员设计，用于评估其有权测试的系统所面临的风险。 重要提示 ：此脚本仅执行 GET 请求，不会 尝试利用漏洞...

Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software

CVE-2025-20333 Scanner A Python-based diagnostic scanner for...

UAT-4356's Targeting of Cisco Firepower Devices

Cisco Talos is aware of UAT-4356's continued active targeting of Cisco Firepower devices' Firepower eXtensible Operating System FXOS. UAT-4356 exploited n-day vulnerabilities CVE-2025-20333 and CVE-2025-20362 to gain unauthorized access to vulnerable devices, where the threat actor deployed their...

CISA Warns of Active Attacks on Cisco ASA and Firepower Flaws

CISA issues an urgent directive for all organizations to patch Cisco ASA and Firepower devices against CVE-2025-20362 and CVE-2025-20333, exploited in the ArcaneDoor campaign. Verify the correct version now!...

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

The U.K. National Cyber Security Centre NCSC has revealed that threat actors have exploited the recently disclosed security flaws impacting Cisco firewalls as part of zero-day attacks to deliver previously undocumented malware families like RayInitiator and LINE VIPER. "The RayInitiator and LINE...

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco Secure Firewall Adaptive Security ASA Appliance and Secure Firewall Threat Defense FTD Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333...