day08-CISCO-fmc-sim

Day08 — 模拟 Cisco FMC 风格管理 RCE 这是一个最小化的教学模拟，展示了管理平面解析 RCE 的 影响 类别（灵感来自 CVE-2025-20265）。它有意从精心构造的输入中执行命令，仅用于本地学习。 快速开始 root@kitploit: chmod +x entrypoint.sh exploit.sh docker build -t fmc-sim . docker run --rm -d -p 8444:8444 --name fmc-sim fmc-sim...

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC 严重 RCE 漏洞 Cisco Secure Firewall Management Center 中的未认证远程代码执行 📌 概述 一个严重的预认证 Java 反序列化漏洞 ，允许远程攻击者在 Cisco FMC 设备上实现 root 级代码执行 。 关键信息 属性| 详情 ---|--- 严重程度| 严重 CVSS 评分| 10.0 漏洞类型| Java 反序列化 已被在野利用| 是（勒索软件攻击活动） 补丁可用| 是 ✨ 安全的漏洞检测工具 一个美观、安全且可靠的 CVE-2026-20131 检测工具。 📸 演示 功能特性...

cve2025-20265

cve2025-20265 安全的 Python 脚本，用于检测可能受 CVE-2025-20265 影响的 Cisco FMC 实例。使用官方 FMC API 检查版本，支持单/多目标扫描，并包含一个无害的本地 PoC 标记。 Cisco FMC CVE-2025-20265 漏洞检查器（安全） 功能： 使用官方 FMC REST API 查询版本信息 与已知受影响版本进行比较 可选的 --poc 模式：在检测到易受攻击的版本时，打印一个 无害的本地证明概念（PoC）标记 （不会向目标发送任何内容） 支持 单个目标 或从文件读取 多个目标 彩色输出，便于阅读 ⚠️ 不包含利用代码 —...

CVE-2026-20079-checker

CVE-2026-20079 Cisco FMC 只读检查器 一个针对 CVE-2026-20079 （Cisco Secure Firewall Management Center FMC 身份验证绕过漏洞）的小型、刻意限制功能的验证工具。 本仓库是检查器，不是漏洞利用工具。 它不包含该漏洞链中的会话升级、文件写入、命令执行或 RCE 部分。 检查内容 该检查器向 /help/about.cgi 发送两个 HTTPS 请求： 1. 一个正常的未认证请求；以及 2. 带有 CGISESSID=csmprocesses 的相同请求。 仅当第二个响应满足以下条件时，才会将发现标记为...

Cisco-FMC-honeypot

FMC-Trap 一个低交互蜜罐 ，模拟Cisco Secure Firewall Management Center FMC 的Web界面，并捕获未认证的Java序列化风格 攻击流量（CVE风格的不安全反序列化 探测）。 安全设计： 该应用程序不会 反序列化Java对象；它检测\xac\xed\x00\x05（以及Base64 rO0AB…）并使用正则表达式和启发式方法提取shell或URL字符串。 无命令执行： 第二阶段URL仅通过Python requests 检索到不可执行的下载卷中。 面向生产的堆栈： Docker Compose 配合 Gunicorn 以及可选的 Caddy...

FuegoTest

FuegoTest FuegoTest 是一款命令行界面（CLI）工具，旨在检测 Cisco Firepower Management Center（FMC）中可能受 CVE-2023-20048 影响的设备。借助 rich 库，FuegoTest 提供了增强的用户体验，包括进度条和样式化文本的终端输出。 功能特性 使用提供的凭据对 Cisco FMC 进行身份验证。 获取并列出 FMC 管理的设备。 检测可能受 CVE-2023-20048 影响的设备。 终端输出增强：进度条和样式化文本。 前提条件 在开始之前，请确保满足以下要求： Python 3.6 或更高版本 用于安装依赖项的...

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the patches by September 12, 2026. The...

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco Secure Firewall Management Center FMC Software and Cisco Security Cloud Control SCC Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on...

VulnCheck KEV: CVE-2026-20316

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

Exploit for CVE-2026-20079

CVE-2026...

EUVD-2026-9424

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

CVE-2026-20018

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating...

CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due ...

EUVD-2024-18102

Malicious code in bioql PyPI...

CVE-2025-20148 Cisco Secure Firewall Management Center HTML Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improper validation of user-supplied data. An...

CVE-2024-20388

A vulnerability in the password change feature of Cisco Firepower Management Center FMC software could allow an unauthenticated, remote attacker to determine valid user names on an affected device. This vulnerability is due to improper authentication of password update responses. An attacker coul...

CVE-2024-20387

A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks. This vulnerability is due to improper input sanitization in the web-based management interface of Cisco FMC Software. An...

CVE-2021-34751 Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability

A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This...

Cisco Releases Security Bundle for Cisco ASA, FMC, and FTD Software

Cisco released its October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication to address vulnerabilities in Cisco ASA, FMC, and FTD. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users an...

CVE-2024-20424

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability ...