sdwan-harvester

SD-WAN Harvester 🌐 SD-WAN Internet Census Framework Disclaimer This project is no longer maintained. It is stable and you still can use it for SD-WAN scanning, but currently, more preferable and accurate way to scan different things on the internet not only SD-WAN solutions is to use our new...

CVE-2025-54322-exploit

CVE-2025-54322: XSpeeder SXZOS Pre-Auth RCE Exploit A professional Proof-of-Concept PoC exploit for CVE-2025-54322 , a critical pre-authentication remote code execution vulnerability in XSpeeder SXZOS firmware. This vulnerability was discovered and disclosed by the autonomous AI agent from pwn.ai...

sdwan-cve-2021-1480

Exploit for CVE-2021-1480 SD-WAN PoC materials to exploit the CVE-2021-1480 on Cico SD-WAN. The full publicaiton is available on XMCO website : https://blog.xmco.fr/wp-content/uploads/2021/08/XMCO-SDWANReport-CVE-2021-1480.pdf Usage: 1. update Lines 173 and 176 to set the uid of the current user ...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

CVE-2018-14083

CVE-2018-14083...

CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File Write Path Traversal -orange 📋 Description CVE-2026-20262 is a Path Traversal CWE-22 vulnerability in the web interface of Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage. It allows an authenticated attacker with write permission...

CVE-2025-63296

CVE-2025-63296 摘要 KERUI K259 5MP Wi-Fi / Tuya 智能安防摄像头固件 v33.53.87 在其启动/升级逻辑中包含一个代码执行漏洞 ：在启动过程中，/usr/sbin/anykaservice.sh 会扫描已挂载的 TF/SD 卡，如果存在 /mnt/update.nor.sh，则将其复制到 /tmp/net.sh 并以 root 身份执行，从而允许具有物理接触权限的攻击者运行任意命令。 详细信息 漏洞端点 : /usr/sbin/anykaservice.sh, /usr/bin/updateentry 触发文件 :...

MAL-008

MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 in Cisco SD-WAN Cisco SD-WAN v20.4.2.1 uses an old version of SSH OpenSSH7.6p1 that is susceptible to the “SSHtranger Things” attack. If a victim tries to connect to a malicious/compromised SSH server this attack may be used to write/overwri...

CVE-2026-89440

A flaw was found in the Linux kernel's mmc: via-sdmmc component. During the probe process, if the mmcaddhost function fails, the SD card-detect interrupt handler continues to operate on memory that has already been released. This can lead to memory corruption, potentially allowing a local attacke...

cupshax

CUPSHax Quick proof of concept for the recent CUPS exploit. I was planning to clean it up a lot more, but the embargo was lifted a lot sooner than expected, so the code is a bit rushed. For all the technical details you should honestly just read Evilsocket's writeup. This exploit was written afte...

am335xbootrom

逆向工程 AM335x 引导 ROM 从我第一次拿到几块从垃圾堆里救出来的 Beaglebone Black 板子算起，大概已经过去十八个月了。不幸的是，这些板子无法立即正常工作。这是我第一次接触这类板子，或者说第一次接触任何单板计算机，所以我不确定问题是出在我自己的操作上，还是板子本身有问题（也许这正是它们当初被扔进垃圾堆的原因）。我花了相当长的时间和大量精力，才让这些板子真正开始启动，但我他妈的做到了。以下就是我在这个过程中学到的东西。 注意：如何使用 Ghidra XML 文件 我在这个仓库里包含了一些实用工具，以及一个从 Ghidra 导出的 xml...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Cisco SD-WAN Privilege Escalation Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized security testing. 📋 Description CVE-2026-20245 is a privilege escalation vulnerability in the CLI of Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalyst SD-WAN Manage...

PoC_CVE-2025-48507

在Zynq UltraScale+ MPSoC上突破TrustZone - CVE-2025-48507和CVE-2025-0038的概念验证 非安全软件可利用CVE-2025-48507和CVE-2025-0038在Zynq UltraScale+平台 上获得对安全世界的读/写访问权限，从而破坏TrustZone隔离。为此，非安全软件利用CVE-2025-0038和CVE-2025-48507...

VMware NSX SD-WAN Edge - Command Injection

VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE Injection ⚠️ DISCLAIMER THIS TOOL IS EXCLUSIVELY FOR EDUCATIONAL AND RESEARCH PURPOSES This exploit is intended exclusively for authorized red team operations, penetration testing, and security research on systems where you have explicit written...

sdwan-scanner-CVE-2026-20127

Escáner de Exposición Cisco SD-WAN CVE-2026-20127 Una herramienta especializada de fingerprinting pasivo diseñada para identificar instancias de Cisco SD-WAN vManage / Viptela expuestas a internet. Esta herramienta ayuda a investigadores de seguridad y administradores de sistemas a gestionar su...

Palo Alto Networks PAN-OS 10.2.x < 10.2.14 / 11.1.x < 11.1.8 / 11.2.x < 11.2.8 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.14, 11.1.x prior to 11.1.8, or 11.2.x prior to 11.2.8. It is, therefore, affected by a vulnerability. The Terrapin attack allows an attacker with the ability to intercept SSH traffic on affected Palo Alto...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN 零日漏洞 CVE-2026-20131 自 2023 年起被利用以获取管理员访问权限。 本仓库包含针对 CVE-2026-20131 的可运行概念验证（PoC）漏洞利用代码。该漏洞是 Cisco Catalyst SD-WAN Controller（原 vSmart）和 Catalyst SD-WAN Manager（原 vManage）中的一个严重预认证漏洞，自 2023 年以来已在野外被积极利用。 该漏洞自 2023 年以来已在野外被积极利用。 被 Cisco...