Lucene search
+L

1189 matches found

Gitee
Gitee
added 2021/01/24 10:48 a.m.3 views

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

PoC exploit for CVE-2020-3452, an unauthorized remote file reading vulnerability in Cisco Adaptive Security Appliance and FTD Software. The exploit uses Shodan to scan for vulnerable targets, then attempts to exploit the vulnerability by sending crafted HTTP requests to the identified targets. Th...

7.5CVSS9.3AI score0.99992EPSS
SaveExploits25
GithubExploit
GithubExploit
added 2021/01/05 2:41 p.m.139 views

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the targ...

7.5CVSS7.9AI score0.99992EPSS
SaveExploits25
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.10 views

The vulnerability of the secure loading process for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent the secure loading mechanism.

The vulnerability of the secure loading process for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to failures in the security mechanisms. Exploiting this vulnerability can allow attackers to bypass the secure loading mechanism...

6.8CVSS6.8AI score0.0032EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:0 a.m.15 views

The vulnerability of the SSL/TLS module of Cisco Adaptive Security Appliance’s network firewall allows a attacker to cause a service failure.

The vulnerability of the SSL/TLS module of the Cisco Adaptive Security Appliance software lies in errors during initialization of pointers. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

8.6CVSS5.5AI score0.00883EPSS
SaveExploits0References3Affected Software1
Microsoft Malware Protection
Microsoft Malware Protection
added 2020/11/24 5:0 p.m.30 views

Microsoft Azure Active Directory again a “Leader” in Gartner Magic Quadrant for Access Management

Howdy folks, I’m proud to announce that for the fourth year in a row, Microsoft Azure Active Directory Azure AD has been recognized as a “Leader” in Gartner Magic Quadrant for Access Management, Worldwide. Earlier this year, my boss, Joy Chik, CVP of Identity Engineering shared Microsoft’s guidin...

7.7AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2020/11/24 5:0 p.m.28 views

Microsoft Azure Active Directory again a “Leader” in Gartner Magic Quadrant for Access Management

Howdy folks, I’m proud to announce that for the fourth year in a row, Microsoft Azure Active Directory Azure AD has been recognized as a “Leader” in Gartner Magic Quadrant for Access Management, Worldwide. Earlier this year, my boss, Joy Chik, CVP of Identity Engineering shared Microsoft’s guidin...

7.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.7 views

The vulnerability in the web interface for managing microprogramming software-based Cisco Adaptive Security Appliance (ASA) devices allows a attacker to execute a cross-site scripting attack.

The vulnerability of the web interface for managing microprogramming software in Cisco Adaptive Security Appliances ASA is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a special...

6.1CVSS6.6AI score0.00833EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.11 views

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in the insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site attac...

6.1CVSS7AI score0.85576EPSS
SaveExploits2References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.4 views

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in the insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site attac...

6.1CVSS6.9AI score0.01159EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.6 views

The vulnerability of the web interface of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows attackers to gain unauthorized access to protected information.

The vulnerability of the web-based interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected informatio...

6.5CVSS6.9AI score0.01232EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.7 views

The vulnerability of the SIP protocol implementation in Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows attackers to induce service failures.

The vulnerability of the SIP protocol implementation in Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA lies in resource release errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending SIP traffic...

7.8CVSS7.2AI score0.01681EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.9 views

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site scripting...

6.1CVSS6.7AI score0.01159EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.9 views

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site scripting...

6.1CVSS6.7AI score0.01062EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.7 views

The vulnerability of the TLS session handler in Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows attackers to gain unauthorized access to protected information.

The vulnerability of TLS session handler microprogramming software for Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance is related to information disclosure due to incompatibility issues. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to...

5.3CVSS6.3AI score0.01254EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.6 views

The vulnerability of the implementation of the FTP verification mechanism for microprogramming-based network interface controllers in Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances allows attackers to gain unauthorized access to protected information.

The vulnerability of the FTP verification mechanism implemented by Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

5.8CVSS6.3AI score0.01329EPSS
SaveExploits0References2Affected Software2
GithubExploit
GithubExploit
added 2020/11/18 9:31 p.m.79 views

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

CVE-2020-3452 A WIP python script to exploit the directory tr...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits25
BDU FSTEC
BDU FSTEC
added 2020/11/10 12:0 a.m.10 views

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense, a microprogramming-based network device for SSL/TLS session processors, allows attackers to induce service failures.

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s SSL/TLS session processors involves uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by initiating multiple SSL/TLS sessions and...

8.6CVSS7.6AI score0.01763EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/10 12:0 a.m.11 views

The vulnerability of the implementation of the OSPFv2 protocol in microprogrammed network interface devices from Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows a attacker to induce a service failure.

The vulnerability of the OSPFv2 protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense software involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

8.6CVSS7.2AI score0.01433EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/10 12:0 a.m.6 views

The vulnerability in the web interface of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a perpetrator to trigger a system reboot.

The vulnerability of the web-based interfaces of Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense lies in the absence of restrictions on file downloads. Exploiting this vulnerability could allow a malicious actor to trigger a system reboot by downloading files into specific...

8.6CVSS7.6AI score0.01918EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/10 12:0 a.m.11 views

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted fragmented IP...

8.6CVSS7.6AI score0.01917EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder