DroppedConnection

DroppedConnection 模拟 Cisco ASA Anyconnect VPN 服务，接受任意凭据（并记录日志），然后向客户端提供 VBS 文件，该文件会在用户上下文中执行。 博客文章： https://research.nccgroup.com/2023/03/01/making-new-connections-leveraging-cisco-anyconnect-client-to-drop-and-run-payloads/ 使用说明 1. 将文件复制到服务器。 2. 确保已安装 python2（我知道，但它在设备上能用 ;、pip 以及 pyOpenSSL sudo...

CVE-2022-20699

CVE-2022-20699 🎧 Audiobahn よりお届けします Cisco Anyconnect VPN 未認証 RCE rwx stack 十分にチェックされていません...

EUVD-2011-2048

Malware in sbrugna...

EUVD-2025-9555

Malicious code in bioql PyPI...

EUVD-2022-26183

Malicious code in bioql PyPI...

EUVD-2024-18216

Malicious code in bioql PyPI...

EUVD-2024-18217

Malicious code in bioql PyPI...

EUVD-2024-18215

Malicious code in bioql PyPI...

EUVD-2024-18214

Malicious code in bioql PyPI...

EUVD-2025-18656

Malicious code in bioql PyPI...

EUVD-2024-18213

Malicious code in bioql PyPI...

EUVD-2024-18224

Malicious code in bioql PyPI...

CVE-2025-20271

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due to...

Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due to...

PT-2025-26180 · Cisco · Cisco Meraki Z Series +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX Firmware affected versions not specified Cisco Meraki Z Series Teleworker Gateway devices affected versions not specified Description: A vulnerability in the Cisco AnyConnect VPN server could allow an unauthenticated, remote...

CVE-2025-20271: Use of Uninitialized Variable

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due...

CVE-2024-20500

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerability is due to insufficient resource...

CVE-2024-20513

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. This vulnerability is due to...

CVE-2024-20502

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insufficient resource management while establishi...

CVE-2024-20509

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service DoS condition for individual users of the AnyConnect VPN...