stunner

STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...

cisco-security-research

Cisco Security Research Researcher: 0xReadingSteiner Contact: [email protected] Vendor: Cisco Systems, Inc. Vendor Notified: 2026-08-04 Cisco PSIRT, ZDI, SSD Vendor Response: None Why This Exists Independent security research on commercially available Cisco products has identified critical...

CVE-2023-20209

I started looking at Cisco Expressway after I noticed quite a few of them on the internet during Red Team engagements, but never had the time during work to explore the product further. Initially I was looking for an auth bypass to chain into RCE but ran out of time and settled on a post auth RCE...

Cisco Expressway Series X15.5.3 Remote Code Execution

Cisco Expressway Series versions X15.5.3 and earlier configured in a cluster contain a remote code execution vulnerability due to persistent cookies and insufficient client certificate validation. The supplied offline tool assesses saved inventory and CLI evidence...

Cisco Expressway Symbolic Link

The vulnerability of Cisco Expressway microprogramming software relates to the improper definition of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Cisco Expressway Micro-programming DoS

The vulnerability of Cisco Expressway microprogramming software is related to an error in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco Expressway micro-programming software Data Compromise

The vulnerability of Cisco Expressway microprogramming software is related to improper code generation management. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco Expressway Resource Control

The vulnerability of Cisco Expressway microprogramming software is related to insufficient resource control during its existence. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Cisco Expressway Buffer Overflow DoS

The vulnerability of Cisco Expressway’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Cisco Expressway Reachability Assertion DoS

The vulnerability of Cisco Expressway microprogramming software is related to an uncontrolled and exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Cisco Expressway Pointer Manipulation DoS

The vulnerability of Cisco Expressway microprogramming software relates to the manipulation of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Cisco Expressway Micro-programming Buffer Overflow

The vulnerability of Cisco Expressway microprogramming software is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...

Cisco Expressway Series Information Disclosure (cisco-sa-expressway-inf-disc-vvYqgSTS)

According to its self-reported version, Cisco Expressway Series is affected by an information disclosure vulnerability. - A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due t...

Vulnerabilities found in Cisco Expressway Series devices

Cisco has identified several vulnerabilities in the Cisco Expressway Series. These vulnerabilities involve insufficient authorization checks during Mobile and Remote Access provisioning, allowing unauthorized external attackers to gain access to sensitive information. Additionally, there is a...

CVE-2026-76496

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76495

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76497

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76491

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76490

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76492

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...