1152 matches found
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect 4.8.02042 privilege escalation through path traversal Description The auto-update feature of Cisco AnyConnect is affected by a path traversal vulnerability. An attacker can exploit this vulnerability to gain system level privileges. For more details, please refer to...
CVE-2020-3433
PoCs for CVE-2020-3433, CVE-2020-3434, and CVE-2020-3435 PoCs and technical details for the three vulnerabilities found on Cisco AnyConnect Secure Mobility Client for Windows in May 2020: CVE-2020-3433 - High CVSS Score 7.8 - a local privilege escalation CVE-2020-3434 - Medium CVSS Score 5.5 - a...
CVE-2020-3452
CVE-2020-3452 Cisco Adaptive Security Appliance ASA y Cisco Firepower Threat Defense FTD — Vulnerabilidad de recorrido de directorio de solo lectura en el servicio web Una vulnerabilidad en la interfaz de servicios web del software Cisco Adaptive Security Appliance ASA y del software Cisco...
CVE-2023-20178
CVE-2023-20178 This is PoC for Arbitrary File Delete vulnerability in Cisco Secure Client tested on 5.0.01242 and Cisco AnyConnect tested on 4.10.06079. When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default...
CVE-2020-3153
CVE-2020-3153 Código POC para CVE-2020-3153 - vulnerabilidad de path traversal en Cisco AnyConnect Lea más sobre la vulnerabilidad aquí: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Pasos a seguir para obtener un shell de Windows en el...
DroppedConnection
DroppedConnection Emula un servicio VPN de Cisco ASA Anyconnect, aceptando cualquier credencial y registrándolas antes de servir VBS al cliente, que se ejecuta en el contexto del usuario. Entrada de blog:...
CVE-2020-3452-Cisco-Scanner
CVE-2020-3452 - Escáner Cisco ASA Escaneo para CVE-2020-3452 - Path Traversal no autenticado que afecta a cortafuegos Cisco ASA con anyconnect https://vulners.com/cve/CVE-2020-3452 Documentos de soporte:...
CVE-2022-20699
CVE-2022-20699 🎧 Traído a usted por Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack no está bien verificado...
CVE-2021-1366
CVE-2021-1366 Escalada de privilegios local en Cisco AnyConnect Posture HostScan: CVE-2021-1366 Una vulnerabilidad en el canal de comunicación entre procesos IPC de Cisco AnyConnect Secure Mobility Client para Windows podría permitir a un atacante local autenticado realizar un ataque de secuestro...
CVE-2022-20699
CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...
NachoVPN
NachoVPN 🌮🔒 NachoVPN es una Prueba de Concepto que demuestra la explotación de clientes SSL-VPN, utilizando un servidor VPN malicioso. Utiliza una arquitectura basada en plugins para que la comunidad pueda contribuir con soporte para productos SSL-VPN adicionales. Actualmente admite varios...
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP PoC Gracias a Yorick Koster por publicar los detalles. Esto es una prueba de concepto para una vulnerabilidad de path traversal en Cisco AnyConnect Secure Mobility Client. Probado con Windows 7 y Windows 10 y AnyConnect versiones 4.5.x y...
Cisco ASA/FTD Software - Cross-Site Scripting
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...
Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...
Cisco ASA/FTD WebVPN/AnyConnect Improper Input Validation (CVE-2020-3452)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability i...
[SECURITY] Fedora 44 Update: ocserv-1.5.0-2.fc44
OpenConnect server ocserv is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also currently experimental compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protoco...
Exploit for Path Traversal in Cisco Catalyst_Sd-Wan_Manager
CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File...
EUVD-2015-0677
Malware in sbrugna...