CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Solo un exploit básico que abusa de CVE-2020-3452 para enumerar los archivos estándar accesibles en el directorio web de los dispositivos CISCO ASA/FTD. Uso: Por defecto, esto utiliza una lista de archivos construida a partir de la salida de muestra de CVE-2018-0296 en...

cve-2020-3452

CVE-2020-3452-Exploit For Educational Purpose ONLY! Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

CVE-2020-3580

CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt fi...

CVE-2020-3580

CVE-2020-3580 XSS reflejado en Cisco ASA / FTD en el endpoint WebVPN SAML SP ACS /+CSCOE+/saml/sp/acs. Parcheado en cisco-sa-asaftd-xss-multiple-FCB3vPZe. Este repositorio contiene: xss.html — un PoC verificable por humanos para objetivos autorizados. src/ — un pipeline de descubrimiento y...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner Un escáner Python seguro y no destructivo para bypass de autenticación WebVPN en Cisco ASA / FTD CVE-2025-20362. CVE-2025-20362 permite a atacantes no autenticados eludir la autenticación y acceder a recursos WebVPN restringidos mediante fallos de path traversal /...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Script de prueba de concepto para CVE-2020-3452 — Vulnerabilidad de Path Traversal en Cisco ASA/FTD. Admite extracción automatizada de archivos objetivo conocidos con un límite estricto en descargas exitosas por seguridad. Destinado únicamente a pruebas de...

EUVD-2018-1063

Malware in sbrugna...

EUVD-2021-27312

Malware in sbrugna...

CVE-2025-20252

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service DoS...

CVE-2021-40125

A vulnerability in the Internet Key Exchange Version 2 IKEv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to trigger a denial of service DoS condition on an affected device. This...

U.S. Dept Of Defense: https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD

Hi @U.S. Dept Of Defense, I found a host which is running on the web services interface of Cisco ASA/FTD and it is vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD. An attacker could exploit this vulnerability by sending a crafted HTTP request containing...