Phishious

Phishious とは？ Phishious は、レッドチーム向けに設計されたオープンソースの Secure Email Gateway SEG 評価ツールキットであり、CanIPhish のチームによって開発されました。Phishious を使用すると、フィッシングマテリアルを提示した際に、さまざまな Secure Email Gateway 技術がどのように動作するかを確認できます。 📬 サポートされている Secure Email Gateways 🧐 なぜ Phishious を使うのか？ Phishious が Secure Email Gateway...

HtmlSmuggling

HtmlSmuggling HTML走私是一种恶意技术，黑客利用它将恶意载荷隐藏在经过特殊构造的HTML附件或网页的编码脚本中。 当受害者打开/点击HTML附件/链接时，恶意脚本会解码并部署载荷到目标设备上。 HTML走私技术利用合法的HTML5和JavaScript功能来隐藏恶意载荷，从而逃避安全检测。 HTML走私方法具有很强的隐蔽性。它可以绕过标准的边界安全控制（如Web代理和电子邮件网关），这些控制通常只检查可疑附件，如EXE、DLL、ZIP、RAR、DOCX或PDF。...

CVE-2025-20393

CVE-2025-20393 📌 概述 CVE-2025-20393 是一个影响 Cisco Secure Email Gateway SEG 和 Cisco Secure Email and Web Manager SEWM 设备上运行的 Cisco AsyncOS 的 严重远程命令执行 RCE 漏洞。 该漏洞源于 Spam Quarantine 功能中的 输入验证不当 。未经身份验证的远程攻击者 可通过发送特制的 HTTP 请求来利用此漏洞，从而导致 以 root 权限执行任意命令 。 该漏洞被认定为 极其危险 ，原因如下： 无需身份验证 可通过网络进行利用 可实现系统完全沦陷...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — 检测与响应工具包 针对 CVE-2026-76461 的检测、狩猎和修复资源，该漏洞是 Cisco Secure Email Gateway SEG 的 Cisco AsyncOS 中的一个严重 SQL 注入漏洞。 ⚠️ 免责声明 本仓库仅包含防御性内容 ：Sigma 规则、YARA 规则、技术分析、入侵指标以及修复指南。 它不包含漏洞利用代码、PoC 或武器化工具。 该漏洞已被添加到 CISA 的已知被利用漏洞 KEV 目录中。在发布时，不存在公开的可运行 PoC。请仅在授权环境中使用这些资源。 📌 漏洞摘要 字段| 值 ---|--- CVE|...

CVE-2026-76461

⚡ CVE-2026-76461 - 严重 SQL 注入 Cisco Secure Email Gateway 电子邮件解析逻辑中存在的一个严重、可远程利用的 SQL 注入漏洞，可导致以 root 权限执行任意命令。 !Cisco Advisoryhttps://img.sh...

Cisco Secure Email Gateway SQLi (cisco-sa-esa-inj-2bLVGmhX)

According to its self-reported version, Cisco Secure Email Gateway is affected by a SQL injection vulnerability. - A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root...

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Overview On September 14, 2026, Cisco published a security advisory for CVE-2026-76461, a critical SQL injection vulnerability affecting Cisco AsyncOS Software for Cisco Secure Email Gateway. The vulnerability has a reported CVSS v3.1 base score of 9.8 and could allow an unauthenticated, remote...

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461 , carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of...

CVE-2026-76442

creationtimestamp| type| source ---|---|--- 2026-09-14 20:45:13+00:00| seen| https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway 2026-09-15 12:05:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23...

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway. This vulnerability lies in the processing of email messages within the Cisco AsyncOS software for Cisco Secure Email Gateway. It arises due to insufficient validation of incoming email messages. An unauthorized malicious actor ca...

CVE-2026-76461

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

CVE-2026-76440

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76443

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77626

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442

CVE-2026-76442 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager , where multiple internally discovered vulnerabilities stem from improper validation of specified quantity in input (CWE-1284). Cisco rates this HIGH severity (CVSS 7.5) with a network attack vector , no requ...

CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...