CVE-2022-20866

Comprobador de Claves RSA para CVE-2022-20866 Una vulnerabilidad en el manejo de claves RSA en dispositivos que ejecutan el software Cisco Adaptive Security Appliance y el software Cisco Firepower Threat Defense podría permitir que un atacante remoto no autenticado recupere la clave privada RSA...

CVE-2020-3580

Escáner automatizado CVE-2020-3580 CVE-2020-3580 - Software Cisco Adaptive Security Appliance ASA y Software Cisco Firepower Threat Defense FTD XSS. Uso ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 Coloca los dominios/IP que necesitas escanear como archivo .txt e...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Script de prueba de concepto para CVE-2020-3452 — Vulnerabilidad de Path Traversal en Cisco ASA/FTD. Admite extracción automatizada de archivos objetivo conocidos con un límite estricto en descargas exitosas por seguridad. Destinado únicamente a pruebas de...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Solo un exploit básico que abusa de CVE-2020-3452 para enumerar los archivos estándar accesibles en el directorio web de los dispositivos CISCO ASA/FTD. Uso: Por defecto, esto utiliza una lista de archivos construida a partir de la salida de muestra de CVE-2018-0296 en...

cve-2020-3452

CVE-2020-3452-Exploit For Educational Purpose ONLY! Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit...

CVE-2020-3580

CVE-2020-3580 XSS reflejado en Cisco ASA / FTD en el endpoint WebVPN SAML SP ACS /+CSCOE+/saml/sp/acs. Parcheado en cisco-sa-asaftd-xss-multiple-FCB3vPZe. Este repositorio contiene: xss.html — un PoC verificable por humanos para objetivos autorizados. src/ — un pipeline de descubrimiento y...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner Un escáner Python seguro y no destructivo para bypass de autenticación WebVPN en Cisco ASA / FTD CVE-2025-20362. CVE-2025-20362 permite a atacantes no autenticados eludir la autenticación y acceder a recursos WebVPN restringidos mediante fallos de path traversal /...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...

CVE-2026-20222 Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

EUVD-2018-1063

Malware in sbrugna...

EUVD-2021-27312

Malware in sbrugna...

CVE-2025-20252

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service DoS...

CVE-2021-40125

A vulnerability in the Internet Key Exchange Version 2 IKEv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to trigger a denial of service DoS condition on an affected device. This...

U.S. Dept Of Defense: https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD

Hi @U.S. Dept Of Defense, I found a host which is running on the web services interface of Cisco ASA/FTD and it is vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD. An attacker could exploit this vulnerability by sending a crafted HTTP request containing...