Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...

CVE-2020-3580

Escáner automatizado CVE-2020-3580 CVE-2020-3580 - Software Cisco Adaptive Security Appliance ASA y Software Cisco Firepower Threat Defense FTD XSS. Uso ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 Coloca los dominios/IP que necesitas escanear como archivo .txt e...

CVE-2022-20866

Comprobador de Claves RSA para CVE-2022-20866 Una vulnerabilidad en el manejo de claves RSA en dispositivos que ejecutan el software Cisco Adaptive Security Appliance y el software Cisco Firepower Threat Defense podría permitir que un atacante remoto no autenticado recupere la clave privada RSA...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Solo un exploit básico que abusa de CVE-2020-3452 para enumerar los archivos estándar accesibles en el directorio web de los dispositivos CISCO ASA/FTD. Uso: Por defecto, esto utiliza una lista de archivos construida a partir de la salida de muestra de CVE-2018-0296 en...

cve-2020-3452

CVE-2020-3452-Exploit For Educational Purpose ONLY! Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Script de prueba de concepto para CVE-2020-3452 — Vulnerabilidad de Path Traversal en Cisco ASA/FTD. Admite extracción automatizada de archivos objetivo conocidos con un límite estricto en descargas exitosas por seguridad. Destinado únicamente a pruebas de...

CVE-2020-3580

CVE-2020-3580 XSS reflejado en Cisco ASA / FTD en el endpoint WebVPN SAML SP ACS /+CSCOE+/saml/sp/acs. Parcheado en cisco-sa-asaftd-xss-multiple-FCB3vPZe. Este repositorio contiene: xss.html — un PoC verificable por humanos para objetivos autorizados. src/ — un pipeline de descubrimiento y...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner Un escáner Python seguro y no destructivo para bypass de autenticación WebVPN en Cisco ASA / FTD CVE-2025-20362. CVE-2025-20362 permite a atacantes no autenticados eludir la autenticación y acceder a recursos WebVPN restringidos mediante fallos de path traversal /...

CVE-2026-20222 Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

CVE-2026-20049

CVE-2026-20049 affects Cisco Secure Firewall ASA and Threat Defense (FTD) software. The issue arises in processing GCM-encrypted IKEv2 IPsec traffic due to an insufficiently sized memory allocation, enabling an authenticated attacker to trigger a device reload and DoS. Exploitation requires valid...

EUVD-2018-1063

Malware in sbrugna...

EUVD-2021-27312

Malware in sbrugna...

CVE-2025-20252

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service DoS...

CVE-2021-40125

A vulnerability in the Internet Key Exchange Version 2 IKEv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to trigger a denial of service DoS condition on an affected device. This...

Cisco Cisco Firepower Threat Defense Software SIP DoS (cisco-sa-asa-ftd-sipdos-GGwmMerC)

According to its self-reported version, Cisco FTD Software is affected by a denial of service DoS vulnerability due to a bug which causes a crash. An unauthenticated, remote attacker can exploit this, by sending crafted SIP traffic, in order to cause a DoS condition. Note that Nessus has not test...

U.S. Dept Of Defense: https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD

Hi @U.S. Dept Of Defense, I found a host which is running on the web services interface of Cisco ASA/FTD and it is vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD. An attacker could exploit this vulnerability by sending a crafted HTTP request containing...

U.S. Dept Of Defense: Read-only path traversal (CVE-2020-3452) at https://██████.mil

Summary: I discovered a vulnerability Read-only path traversal CVE-2020-3452 at https://██████████.mil Description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remot...