DroppedConnection

DroppedConnection 模拟 Cisco ASA Anyconnect VPN 服务，接受任意凭据（并记录日志），然后向客户端提供 VBS 文件，该文件会在用户上下文中执行。 博客文章： https://research.nccgroup.com/2023/03/01/making-new-connections-leveraging-cisco-anyconnect-client-to-drop-and-run-payloads/ 使用说明 1. 将文件复制到服务器。 2. 确保已安装 python2（我知道，但它在设备上能用 ;、pip 以及 pyOpenSSL sudo...

CVE-2022-20699

CVE-2022-20699 🎧 由 Audiobahn 提供 Cisco Anyconnect VPN 未授权 RCE rwx stack 它并未经过充分检查。...

EUVD-2011-2048

Malware in sbrugna...

EUVD-2024-18224

Malicious code in bioql PyPI...

EUVD-2024-18213

Malicious code in bioql PyPI...

EUVD-2025-18656

Malicious code in bioql PyPI...

EUVD-2024-18216

Malicious code in bioql PyPI...

EUVD-2022-26183

Malicious code in bioql PyPI...

EUVD-2024-18215

Malicious code in bioql PyPI...

EUVD-2025-9555

Malicious code in bioql PyPI...

EUVD-2024-18214

Malicious code in bioql PyPI...

EUVD-2024-18217

Malicious code in bioql PyPI...

Cisco Meraki 16.2 / 17 / 18.1 < 18.107.13 / 18.2 < 18.211.3 DoS (cisco-sa-meraki-mx-vpn-dos-by-QWUkqV7X)

The version of the remote Cisco Meraki device is 16.2, 17, 18.1 prior to 18.107.13, or 18.2 prior to 18.211.3. It is, therefore, potentially affected by a denial of service vulnerability as referenced in the cisco-sa-meraki-mx-vpn-dos-by-QWUkqV7X advisory: - A vulnerability in the Cisco AnyConnec...

Cisco Meraki 16.2 / 17 / 18.1 < 18.107.12 / 18.2 < 18.211.2 Multiple Vulnerabilities (cisco-sa-meraki-mx-vpn-dos-QTRHzG2)

The version of the remote Cisco Meraki device is 16.2, 17, 18.1 prior to 18.107.12, or 18.2 prior to 18.211.2. It is, therefore, potentially affected by multiple vulnerabilities as referenced in the cisco-sa-meraki-mx-vpn-dos-QTRHzG2 advisory, including: - Multiple vulnerabilities in the Cisco...

Cisco Meraki 16.2 / 17 / 18.1 < 18.107.12 / 18.2 < 18.211.4 / 19.1 < 19.1.4 DoS (cisco-sa-meraki-mx-vpn-dos-vNRpDvfb)

The version of the remote Cisco Meraki device is 16.2, 17, 18.1 prior to 18.107.12, 18.2 prior to 18.211.4, or 19.1 prior to 19.1.4. It is, therefore, potentially affected by a denial of service vulnerability as referenced in the cisco-sa-meraki-mx-vpn-dos-vNRpDvfb advisory: - A vulnerability in...

CVE-2025-20271

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due to...

CVE-2025-20271 Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due to...

Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due to...

PT-2025-26180 · Cisco · Cisco Meraki Z Series +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX Firmware affected versions not specified Cisco Meraki Z Series Teleworker Gateway devices affected versions not specified Description: A vulnerability in the Cisco AnyConnect VPN server could allow an unauthenticated, remote...

CVE-2024-20500

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerability is due to insufficient resource...