2332 matches found
Cisco Unified Communications Manager 7/8/9 - Directory Traversal
A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...
Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230
CVE-2026-20230 Cisco Unified Communications Manager SSRF 任意文件書き込みからRCEへのPoC導出プロセスと考察 適用範囲：ローカルターゲット、許可された再現環境、脆弱性検証、防御ルール分析のみ。未承認のターゲットに対して使用しないこと。本記事は主にCVE-2026-20230の攻撃チェーン、検証可能な現象、判断ロジック、防御の考え方を分析するものであり、直接コピーして実行可能な攻撃パケット、WebShellの内容、コマンド実行ペイロードは提供しない。 1. 脆弱性の背景 CVE-2026-20230は、Cisco Unified...
Ashwesker-CVE-2026-20045
🚨 CVE-2026-20045 — ゼロデイ詳細解説 🚨 🧨 概要 複数の Cisco Unified Communications 製品に影響を与える 重大なリモートコード実行（RCE） 脆弱性です。パッチが公開される前に、実際の攻撃で悪用が確認されていました。 🔥 危険性 🚫 認証不要 🖥️ リモートコード実行 👑 ルート権限取得の可能性 🌍 実環境での悪用が確認済み つまり、攻撃者は影響を受けるシステムをリモートから完全に乗っ取ることが可能です。 🚨 CVE-2026-20045.py の使用例 PoCスクリプトの実行方法について、使用例 を含む洗練されたガイドです。脆弱なCisc...
CVE-2026-20230-Scanner
CVE-2026-20230 Scanner CVE-2026-20230 の影響を受ける可能性がある Cisco Unified Communications Manager Unified CM のデプロイを識別するための Python ベースのスキャナおよび検証ツール。 機能 Cisco Unified CM インスタンスを検出 WebDialer の公開状態を確認 単一ターゲットおよびバルクスキャンをサポート オプションの PoC 検証機能を含む シンプルなコマンドラインインターフェース 使用方法 root@kitploit: python3 scanner.py...
CVE-2026-20230
CVE-2026-20230 - Cisco Unified CM ⚡ 簡単な使い方 このプロジェクトは、以下のような安全で許可された環境でのみ使用してください： ローカル仮想マシン Docker コンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： root@kitploit: git clone https://github.com/HORKimhab/CVE-2025-46822 cd CVE-2025-46822 python -m venv venv Mac/Linux source venv/bin/activate Window WSL/Gi...
CVE-2026-20327
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
CVE-2026-20314
A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...
CVE-2026-20327 Cisco Unified Intelligence Center SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
CVE-2026-20327 Cisco Unified Intelligence Center SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
EUVD-2026-62576
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
CVE-2026-20327
Cisco Unified Intelligence Center contains a blind SQL injection vulnerability in its web-based management interface , caused by insufficient validation of user-supplied input. An authenticated attacker with valid credentials can send a crafted request to read the contents of the device's interna...
CVE-2026-20314 Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...
CVE-2026-20314
Cisco Packaged CCE and Unified CCE are vulnerable to SSRF due to improper input validation of specific HTTP requests. An authenticated, remote attacker with valid credentials can send crafted HTTP requests that cause the device to issue arbitrary network requests. CVSS 5.0 (MEDIUM) limits impact ...
EUVD-2026-62573
A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...
CVE-2026-20314 Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...
Cisco Unified Intelligence Center SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
PT-2026-78495
A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...
PT-2026-78522
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
