CVE-2022-20866

Controllore Chiave RSA per CVE-2022-20866 Una vulnerabilità nella gestione delle chiavi RSA su dispositivi che eseguono il software Cisco Adaptive Security Appliance e Firepower Threat Defense Software potrebbe consentire a un attaccante remoto non autenticato di recuperare la chiave privata RSA...

CVE-2020-3580

Scanner Automatico CVE-2020-3580 CVE-2020-3580 - Software Cisco Adaptive Security Appliance ASA e Cisco Firepower Threat Defense FTD XSS. Utilizzo root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 inserisci i domini/IP che vuoi scansionare in formato fi...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner Ein sicherer, nicht-destruktiver Python-Scanner für Cisco ASA / FTD WebVPN Authentifizierungsumgehung CVE-2025-20362. CVE-2025-20362 ermöglicht nicht authentifizierten Angreifern, die Authentifizierung zu umgehen und auf eingeschränkte WebVPN-Ressourcen durch...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Скрипт Proof-of-concept для CVE-2020-3452 — уязвимости Path Traversal в Cisco ASA/FTD. Поддерживает автоматизированное извлечение известных целевых файлов с жёстким ограничением на количество успешных загрузок для безопасности. Предназначен только для...

cve-2020-3452

CVE-2020-3452-Exploit Solo per scopi educativi! Solo un semplice exploit che sfrutta la vulnerabilità CVE-2020-3452 per enumerare i file standard accessibili nella directory Web delle appliance CISCO ASA/FTD. Utilizzo: Per impostazione predefinita, utilizza un elenco di file costruito dall'output...

CVE-2020-3580

CVE-2020-3580 Cisco ASA / FTD XSS riflesso nell'endpoint WebVPN SAML SP ACS /+CSCOE+/saml/sp/acs. Corretto in cisco-sa-asaftd-xss-multiple-FCB3vPZe. Questo repository contiene: xss.html — un PoC verificabile manualmente per target autorizzati. src/ — un pipeline di scoperta e validazione con...

Cisco-ASA-CVE-2025-20333-Scanner

Scanner CVE-2025-20333 Uno scanner diagnostico basato su Python per il buffer overflow del server Web VPN Cisco ASA / FTD CVE-2025-20333. CVE-2025-20333 è una vulnerabilità critica di heap buffer overflow nel gestore di upload file di WebVPN che può portare a esecuzione remota di codice RCE come...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Sfruttamento di base che abusa di CVE-2020-3452 per enumerare i file standard accessibili nella directory web dei dispositivi CISCO ASA/FTD. Utilizzo: Per impostazione predefinita utilizza un elenco di file costruito da output di esempio di CVE-2018-0296 nel Metasploit...

CVE-2026-20049

CVE-2026-20049 affects Cisco Secure Firewall ASA and Threat Defense (FTD) software. The issue arises in processing GCM-encrypted IKEv2 IPsec traffic due to an insufficiently sized memory allocation, enabling an authenticated attacker to trigger a device reload and DoS. Exploitation requires valid...

EUVD-2018-1063

Malware in sbrugna...

EUVD-2021-27312

Malware in sbrugna...

CVE-2025-20252

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service DoS...

CVE-2021-40125

A vulnerability in the Internet Key Exchange Version 2 IKEv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to trigger a denial of service DoS condition on an affected device. This...

Cisco Cisco Firepower Threat Defense Software SIP DoS (cisco-sa-asa-ftd-sipdos-GGwmMerC)

According to its self-reported version, Cisco FTD Software is affected by a denial of service DoS vulnerability due to a bug which causes a crash. An unauthenticated, remote attacker can exploit this, by sending crafted SIP traffic, in order to cause a DoS condition. Note that Nessus has not test...

U.S. Dept Of Defense: https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD

Hi @U.S. Dept Of Defense, I found a host which is running on the web services interface of Cisco ASA/FTD and it is vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD. An attacker could exploit this vulnerability by sending a crafted HTTP request containing...

U.S. Dept Of Defense: Read-only path traversal (CVE-2020-3452) at https://██████.mil

Summary: I discovered a vulnerability Read-only path traversal CVE-2020-3452 at https://██████████.mil Description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remot...