cisco-CVE-2023-20009

Informazioni Ricercatore di sicurezza: ly1g3, ly1g3attuta.io Impronta GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Panoramica: Remote Code Execution - RCE dal file di configurazione CVE: CVE-2023-20009 Cronologia: Scoperto - ly1g3 Segnalato - ly1g3...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Cisco Adaptive Security Appliance Software - Script di test per la vulnerabilità di inclusione di file locali Utilizzo root@kitploit: python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP predefinito : 80/tcp python Cisco...

cve2025-20265

cve2025-20265 Sicheres Python-Skript zur Erkennung von Cisco FMC-Instanzen, die möglicherweise anfällig für CVE-2025-20265 sind. Verwendet die offizielle FMC-API zur Überprüfung der Version, unterstützt Einzel- und Mehrfachziel-Scans und enthält einen harmlosen lokalen PoC-Marker. Cisco FMC...

CVE-2018-0114

CVE-2018-0114 Sfruttamento di una vulnerabilità nel node-jose di Cisco, una libreria JavaScript creata per gestire i JWT. Questa vulnerabilità nel node-jose di Cisco consente a un attaccante di falsificare token malevoli. JWT consente agli utenti di incorporare chiavi pubbliche usando il valore j...

CVE-2019-1653

CVE-2019-1653 Uma vulnerabilidade na interface de gerenciamento baseada na web dos roteadores VPN WAN Dual Gigabit Cisco Small Business RV320 e RV325 pode permitir que um atacante remoto não autenticado obtenha informações sensíveis. Este simples script Python é uma automação de exploit para o...

CVE-2017-6640-POC

CVE-2017-6640-POC Prova de conceito para CVE-2017-6640 como extensão burp Cisco Prime Data Center Network Manager DCNM implementa credenciais estáticas. Veja também: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 Mais especificamente, a interface web...

CVE-2025-20281-Cisco

CVE-2025-20281 - Verificatore della Vulnerabilità RCE Cisco ISE Questo script verifica la presenza della vulnerabilità CVE-2025-20281 in Cisco Identity Services Engine ISE e ISE-PIC, che consente esecuzione remota di codice RCE non autenticata come root a causa di una convalida insufficiente...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker Cisco CVE-2020-3452 जाँचकर्ता का सरल bash स्क्रिप्ट आवश्यकता: Shodan-CLI: pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation अस्वीकरण: यह स्क्रिप्ट केवल सुरक्षा विश्लेषण और अनुसंधान के लिए है, इसलिए यदि इसका उपयोग अवैध गतिविधियों...

CVE-2016-6366

CVE-2016-6366 Repository pubblico per i miglioramenti all'exploit EXTRABACON, un'esecuzione di codice remoto per Cisco ASA scritto dal gruppo Equation NSA e divulgato da Shadow Brokers. C'è uno shellcode migliorato, uno script per il rilevamento degli offset LINA, un modulo Metasploit ed...

Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected...

Cisco ASA/FTD Software - Cross-Site Scripting

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...

Cisco IOS HTTP Configuration - Authentication Bypass

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. id: CVE-2001-0537 info: name: Cisco IOS HTTP Configuration - Authentication Bypass author:...

Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection

Lantronix PremierWave 2050 8.9.0.0R4 contains an OS command injection vulnerability. A specially-crafted HTTP request can lead to command in the Web Manager Wireless Network Scanner. An attacker can make an authenticated HTTP request to trigger this vulnerability. id: CVE-2021-21881 info: name:...

Hardcoded Admin Credentials For Cisco Smart Licensing Utility API

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...

Cisco RV132W/RV134W Router - Information Disclosure

Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information. id: CVE-2018-012...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...