CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 スキャナー Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – All Rights Reserved CYBERDUDEBIVASH AUTHORITY の下で認定 – CVE-2025-20393（Cisco Secure Email Gateway / SMA における認証なし RCE）のための倫理的検出ツールです。 このツールは、オープンな TCP/6025 ポート、応答する Spam Quarantine インターフェース、および既知の侵害後 IOC...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – 重大なCisco AsyncOS脆弱性 🔍 概要 CVE‑2025‑20393 は、Cisco AsyncOS Software における重大なリモートコード実行（RCE）脆弱性 であり、以下に影響します： Cisco Secure Email Gateway （物理および仮想） Cisco Secure Email and Web Manager （物理および仮想） ⚠️ Spam隔離機能が有効かつ外部に公開されている システムのみが影響を受けます。 深刻度： 重大（CVSS 3.1：10.0 / 最大） 弱点： 不適切な入力検証（CWE-20 ）...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — 検出および対応キット CVE-2026-76461 の検出、ハンティング、および修復リソース。これは Cisco Secure Email Gateway SEG 向け Cisco AsyncOS における重大な SQL インジェクション脆弱性です。 ⚠️ 免責事項 このリポジトリには防御的なコンテンツのみ が含まれています: Sigma ルール、YARA ルール、技術分析、侵害指標 IoC、および修復ガイダンスです。 エクスプロイトコード、PoC、または武器化されたツールは含まれていません。 この脆弱性は CISA の Known Exploited...

cisco-CVE-2023-20075

概要 セキュリティ研究者: ly1g3, ly1g3attuta.io GPGフィンガープリント: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概要: ローカル権限昇格とシェルエスケープ CVE: CVE-2023-20075 タイムライン: 発見 - ly1g3 報告 - ly1g3 修正 - Cisco Cisco AsyncOS 14.2.0 ESA Cisco Secure Email 権限昇格 - cliからrootシェルへ...

Exploit for SQL Injection in Cisco Asyncos

CVE-2026-76461 Vulnerability Exercise This project contains a...

Exploit for SQL Injection in Cisco Asyncos

CVE-2026-76461 — Detection & Response Kit Detection, hunting,...

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway. This vulnerability lies in the processing of email messages within the Cisco AsyncOS software for Cisco Secure Email Gateway. It arises due to insufficient validation of incoming email messages. An unauthorized malicious actor ca...

CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

CVE-2026-76461: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

📄 Cisco AsyncOS 14.2.0 Privilege Escalation / Local Root

Cisco AsyncOS version 14.2.0 local privilege escalation details that achieve a local root shell. About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Local Privilege Escalation and Shell...

📄 Cisco AsyncOS 14.2.0 Code Execution

ESA Cisco Secure Email and Cisco Secure Email and Web Manager with Cisco AsyncOS version 14.2.0 allows an authenticated user with permissions to SNMP-config that ability to execute arbitrary code as root using a specially crafted SNMP trap config. This is for an older issue from 2023. About...

The vulnerability of the Cisco AsyncOS operating system authentication service for Cisco Secure Web Appliances allows a hacker to bypass the authentication process.

The vulnerability of the Cisco AsyncOS operating system authentication service for Cisco Secure Web Appliances is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process and gain unauthorized access to protected informatio...

EUVD-2026-22964

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

CVE-2026-20152

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

PT-2026-33089

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

CVE-2026-20152: Authentication Bypass by Primary Weakness

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

PT-2026-6079

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Secure Web Appliance affected versions not specified Description A flaw in the Dynamic Vectoring and Streaming DVS Engine implementation may allow a remote, unauthenticated attacker to circumvent the anti-malwa...

CVE-2026-20056: Download of Code Without Integrity Check

A vulnerability in the Dynamic Vectoring and Streaming DVS Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is du...

The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, within the tools of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, allows a malicious user to execute arbitrary code with root privileges.

The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, as well as in products like Cisco Secure Email and Web Manager, and Cisco Secure Email Gateway, is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability could allow ...

Vulnerability in Cisco AsyncOS

Cisco has a vulnerability in Cisco AsyncOS. The vulnerability is in devices using Cisco AsyncOS software in conjunction with Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Exploitation requires the service to be accessible from the Internet and the Spam Quarantine feature to b...