staystaystay

staystaystay staystaystay 是一个针对 CVE-2021-1585 的概念验证漏洞利用程序，该漏洞是影响 Cisco ASA Device Manager ASDM 的中间人或恶意端点 RCE 问题。该问题最初由 Malcolm Lashley 发现并在 2021 年夏季披露。然而，在我研究此问题时，最新版本 ASDM 7.171 仍未修补，我独立发现了它。 Cisco 在 ASDM 7.181.152 中“修复”了此问题。我之所以说“修复”，是因为此漏洞利用仍然有效。用户只需点击“是”。请观看下面的视频。 攻击者可以配置两种类型的有效载荷来获取受害者的反向...

theway

The Way The Way 是一款用于解包、重新打包和创建恶意 Cisco 自适应安全设备管理器 ASDM 包的工具。ASDM 是基于 Java 的图形化管理界面，用于管理自适应安全设备 ASA 系统（例如防火墙和 VPN）。ASDM 包托管在 ASA 上，管理员每次通过 ASDM 连接到 ASA 时，都会下载子组件。能够将恶意 ASDM 包植入 ASA 的攻击者可以在管理员系统上实现代码执行。 该漏洞是由几个问题共同导致的。最具体地说，由于 Cisco 未对包进行签名，因而可以制造恶意 ASDM 包。能够构造合法包并计算文件哈希的攻击者可以在 ASA 上加载任意包。此漏洞已被分配编...

CVE-2026-76413

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

EUVD-2026-81120

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

EUVD-2022-25901

Malicious code in bioql PyPI...

CVE-2022-20651

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

Exploit for Code Injection in Cisco Adaptive_Security_Device_Manager

staystaystay staystaystay is a proof of concept exploit for...

Cisco Adaptive Security Device Manager (ASDM) Detection

Binary data ciscoasdmdetect.nbin...

Cisco Adaptive Security Device Manager Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

CVE-2021-1585

A vulnerability in the Cisco Adaptive Security Device Manager ASDM Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature verification for specific code exchanged between the ASDM and...

CVE-2021-1585

A vulnerability in the Cisco Adaptive Security Device Manager ASDM Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature verification for specific code exchanged between the ASDM and...

Design/Logic Flaw

A vulnerability in the Cisco Adaptive Security Device Manager ASDM Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature verification for specific code exchanged between the ASDM and...

Cisco Adaptive Security Device Manager 代码注入漏洞

Cisco Adaptive Security Device Manager ASDM is a simple, GUI-based firewall device management application. a remote code execution vulnerability exists in Cisco Adaptive Security Device Manager ASDM version 9.16.1 and earlier. The vulnerability stems from a lack of proper signature verification o...