cve2025-20265

cve2025-20265 Script Python sicuro per rilevare istanze Cisco FMC potenzialmente vulnerabili a CVE-2025-20265. Utilizza l'API ufficiale FMC per verificare la versione, supporta scansioni singole/multi-target e include un marcatore PoC locale innocuo. Checker di vulnerabilità Cisco FMC...

CVE-2026-20131

🚨 CVE-2026-20131 | Критическая RCE в Cisco FMC Неаутентифицированное удаленное выполнение кода в Cisco Secure Firewall Management Center 📌 Обзор Критическая уязвимость десериализации Java до аутентификации , позволяющая удаленным злоумышленникам выполнить код с правами root на устройствах Cisco...

Cisco-FMC-honeypot

FMC-트랩 저상호작용 허니팟 으로, Cisco Secure Firewall Management Center FMC 웹 표면을 모방하고 인증되지 않은 Java 직렬화 스타일 공격 트래픽CVE 스타일 안전하지 않은 역직렬화 프로브을 캡처합니다. 안전한 설계: 애플리케이션은 Java 객체를 역직렬화하지 않습니다. \xac\xed\x00\x05및 Base64 rO0AB…를 탐지하고 정규 표현식 및 휴리스틱을 사용하여 셸 또는 URL 문자열을 추출합니다. 명령 실행 없음: 2단계 URL은 Python requests를 사용하여 실행...

day08-CISCO-fmc-sim

Day08 — RCE de Gerenciamento no estilo Cisco FMC Simulação Esta é uma simulação mínima e educacional que demonstra a classe de impacto de uma RCE de parsing no plano de gerenciamento inspirada na CVE-2025-20265. Ela executa intencionalmente comandos a partir de entrada elaborada, apenas para...

FuegoTest

FuegoTest O FuegoTest é uma ferramenta de Interface de Linha de Comando CLI projetada para detectar dispositivos potencialmente vulneráveis ao CVE-2023-20048 no Cisco Firepower Management Center FMC. Utilizando a biblioteca Rich, o FuegoTest oferece uma experiência de usuário aprimorada com barra...

VulnCheck KEV: CVE-2026-20316

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

Exploit for CVE-2026-20079

CVE-2026...

EUVD-2026-9424

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

CVE-2026-20018

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating...

CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due ...

EUVD-2024-18102

Malicious code in bioql PyPI...

CVE-2025-20148 Cisco Secure Firewall Management Center HTML Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improper validation of user-supplied data. An...

CVE-2024-20388

A vulnerability in the password change feature of Cisco Firepower Management Center FMC software could allow an unauthenticated, remote attacker to determine valid user names on an affected device. This vulnerability is due to improper authentication of password update responses. An attacker coul...

CVE-2024-20387

A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks. This vulnerability is due to improper input sanitization in the web-based management interface of Cisco FMC Software. An...

CVE-2021-34751 Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability

A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This...

Cisco Releases Security Bundle for Cisco ASA, FMC, and FTD Software

Cisco released its October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication to address vulnerabilities in Cisco ASA, FMC, and FTD. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users an...

CVE-2024-20424

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability ...

CVE-2024-20387

A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks. This vulnerability is due to improper input sanitization in the web-based management interface of Cisco FMC Software. An...

CVE-2024-20387

A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks. This vulnerability is due to improper input sanitization in the web-based management interface of Cisco FMC Software. An...

CVE-2024-20387

CVE-2024-20387 affects Cisco FMC Software (Web-based management interface). The issue is due to improper input sanitization, enabling an authenticated, remote attacker to store malicious content for stored XSS by persuading a user to click a malicious link. Impact is stored XSS on the affected de...