1058 matches found
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect 4.8.02042 privilege escalation through path traversal Description The auto-update feature of Cisco AnyConnect is affected by a path traversal vulnerability. An attacker can exploit this vulnerability to gain system level privileges. For more details, please refer to...
CVE-2020-3452
CVE-2020-3452 Cisco Adaptive Security Appliance ASA & Cisco Firepower Threat Defense FTD Web Service Read-Only Directory Traversal A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an...
DroppedConnection
DroppedConnection Emulates a Cisco ASA Anyconnect VPN service, accepting any credentials and logging them before serving VBS to the client that gets executed in the context of the user. Blog post:...
CVE-2020-3433
PoCs for CVE-2020-3433, CVE-2020-3434, and CVE-2020-3435 PoCs and technical details for the three vulnerabilities found on Cisco AnyConnect Secure Mobility Client for Windows in May 2020: CVE-2020-3433 - High CVSS Score 7.8 - a local privilege escalation CVE-2020-3434 - Medium CVSS Score 5.5 - a...
CVE-2021-1366
CVE-2021-1366 Cisco AnyConnect Posture HostScan Local Privilege Escalation: CVE-2021-1366 A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an...
CVE-2020-3153
CVE-2020-3153 POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability Read more about the vulnerability here: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Steps to follow to get Windows shell on desktop with SYSTEM...
CVE-2023-20178
CVE-2023-20178 这是Cisco Secure Client（测试版本5.0.01242）和Cisco AnyConnect（测试版本4.10.06079）中任意文件删除漏洞的PoC。 当用户连接到VPN时，vpndownloader.exe进程会在后台启动，并在c:\windows\temp目录下创建具有默认权限的目录，格式如下：.tmp。创建此目录后，vpndownloader.exe会检查该目录是否为空，如果不为空，则会删除其中的所有文件/目录。这种行为可被滥用以NT Authority\SYSTEM账户权限执行任意文件删除操作。...
Cisco ASA/FTD Software - Cross-Site Scripting
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...
CVE-2020-3452-Cisco-Scanner
CVE-2020-3452 - Cisco ASA Scanner Scanning for CVE-2020-3452 - unauth Path Traversal affecting Cisco ASA firewalls running anyconnect https://vulners.com/cve/CVE-2020-3452 Supporting Documents: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ro-path-KJuQhB86...
CVE-2022-20699
CVE-2022-20699 🎧 由 Audiobahn 提供 Cisco Anyconnect VPN 未授权 RCE rwx stack 它并未经过充分检查。...
CVE-2022-20699
CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...
NachoVPN
NachoVPN 🌮🔒 NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server. It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by the community. It currently supports various popular corporate VPN...
Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP PoC Gracias a Yorick Koster por publicar los detalles. Esto es una prueba de concepto para una vulnerabilidad de path traversal en Cisco AnyConnect Secure Mobility Client. Probado con Windows 7 y Windows 10 y AnyConnect versiones 4.5.x y...
Cisco ASA/FTD WebVPN/AnyConnect Improper Input Validation (CVE-2020-3452)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability i...
[SECURITY] Fedora 44 Update: ocserv-1.5.0-2.fc44
OpenConnect server ocserv is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also currently experimental compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protoco...
EUVD-2015-6248
Malware in sbrugna...
EUVD-2012-3066
Malware in sbrugna...