CVE-2022-20866

Проверка RSA-ключей для CVE-2022-20866 Уязвимость в обработке RSA-ключей на устройствах под управлением ПО Cisco Adaptive Security Appliance и Firepower Threat Defense может позволить неаутентифицированному удалённому злоумышленнику получить закрытый ключ RSA. Эта уязвимость вызвана логической...

CVE-2020-3580

CVE-2020-3580 자동 스캐너 CVE-2020-3580 - Cisco Adaptive Security Appliance ASA 소프트웨어 및 Cisco Firepower Threat Defense FTD 소프트웨어 XSS. 사용법 root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 스캔할 도메인/IP를 .txt 파일 형식으로 같은 폴더에 넣으세요. root@kitploit: ▶ python main.py ...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Сканер Безопасный, не деструктивный Python-сканер для обхода аутентификации Cisco ASA / FTD WebVPN CVE-2025-20362. CVE-2025-20362 позволяет неаутентифицированным злоумышленникам обходить аутентификацию и получать доступ к ограниченным ресурсам WebVPN через ошибки обхода пути /...

cve-2020-3452

CVE-2020-3452-익스플로잇 교육 목적으로만 사용하십시오! CVE-2020-3452를 악용하여 CISCO ASA/FTD 장비의 웹 디렉터리에서 접근 가능한 표준 파일을 열거하는 기본적인 익스플로잇입니다. 사용법: 기본적으로 이 스크립트는 Metasploit Framework https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/ciscodirectorytraversal.md의...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Сканер Диагностический сканер на Python для Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 — критическая уязвимость переполнения буфера в куче в обработчике загрузки файлов WebVPN, которая при успешной эксплуатации может привести к удаленному выполнен...

CVE-2026-20222 Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal CVE-2020-3452 — Cisco ASA/FTD パストラバーサル脆弱性の Proof-of-concept スクリプト。既知のファイルターゲットの自動抽出をサポートし、安全性のためダウンロード成功数にハードリミットを設定しています。許可されたセキュリティテストおよび研究目的専用です。 🔐 GitHub リポジトリの説明 CVE-2020-3452 — Cisco ASA/FTD パストラバーサル脆弱性の Proof-of-concept...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit CVE-2020-3452를 악용하여 CISCO ASA/FTD 장비의 웹 디렉터리에서 접근 가능한 표준 파일들을 열거하는 기본적인 익스플로잇입니다. 사용법: 기본적으로 Metasploit Framework의 CVE-2018-0296 샘플 출력에서 구성된 파일 목록을 사용합니다...

CVE-2020-3580

CVE-2020-3580 Cisco ASA / FTD의 WebVPN SAML SP ACS 엔드포인트/+CSCOE+/saml/sp/acs에서 발생하는 반사형 XSS입니다. cisco-sa-asaftd-xss-multiple-FCB3vPZe에서 패치되었습니다. 이 저장소에는 다음이 포함되어 있습니다: xss.html — 승인된 대상에 대해 사람이 직접 검증할 수 있는 PoC src/ — 탐색 및 범위 인식 검증 파이프라인 docs/ — 방법론 및 윤리 파이프라인이 수행하는 작업 root@kitploit: ┌──────────┐...

CVE-2026-20049

CVE-2026-20049 affects Cisco Secure Firewall ASA and Threat Defense (FTD) software. The issue arises in processing GCM-encrypted IKEv2 IPsec traffic due to an insufficiently sized memory allocation, enabling an authenticated attacker to trigger a device reload and DoS. Exploitation requires valid...

EUVD-2018-1063

Malware in sbrugna...

EUVD-2021-27312

Malware in sbrugna...

CVE-2025-20252

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service DoS...

CVE-2021-40125

A vulnerability in the Internet Key Exchange Version 2 IKEv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to trigger a denial of service DoS condition on an affected device. This...

Cisco Cisco Firepower Threat Defense Software SIP DoS (cisco-sa-asa-ftd-sipdos-GGwmMerC)

According to its self-reported version, Cisco FTD Software is affected by a denial of service DoS vulnerability due to a bug which causes a crash. An unauthenticated, remote attacker can exploit this, by sending crafted SIP traffic, in order to cause a DoS condition. Note that Nessus has not test...

U.S. Dept Of Defense: https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD

Hi @U.S. Dept Of Defense, I found a host which is running on the web services interface of Cisco ASA/FTD and it is vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD. An attacker could exploit this vulnerability by sending a crafted HTTP request containing...

U.S. Dept Of Defense: Read-only path traversal (CVE-2020-3452) at https://██████.mil

Summary: I discovered a vulnerability Read-only path traversal CVE-2020-3452 at https://██████████.mil Description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remot...