CVE-2024-20405

描述 Cisco Finesse 基于 Web 的管理接口存在一个漏洞，允许未经身份验证的远程攻击者通过利用 RFI 漏洞执行存储型 XSS 攻击。此漏洞是由于对发送到受影响设备的特定 HTTP 请求的用户输入验证不足所致。攻击者可以通过诱使用户点击精心设计的链接来利用此漏洞。成功利用后，攻击者可以在受影响接口的上下文中执行任意脚本代码，或访问受影响设备上的敏感信息。 概念验证 PoC 1. 创建一个与原始方案路径相同的完整路径。 root@kitploit: mkdir cuicui && mkdir cuicui/gadget && mkdir...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 概念验证 Writeup：https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ 该 Python 脚本滥用了未经验证即可在 /admin/files-upload/ 使用的上传功能。 脚本在本地创建一个 bin 文件夹和一个名为 isehourlycron.sh 的文件，并用 Cisco ISE 安装（位于 /opt/CSMS/bin 目录）的原始内容填充该文件（该文件经过 base64 编码并包含在脚本中）。...

cisco-sa-sma-attack-N9bf4

Vérification d'exposition Cisco SMA Petit script Python 3 en un seul fichier pour sonder rapidement un hôte ou un domaine à la recherche de ports de gestion et de quarantaine ouverts pour Cisco Secure Email/Secure Malware Analytics indicateurs d'exposition CVE-2025-20393. Utilisation Installez...

CVE-2025-20352

CVE-2025-20352 — Cisco IOS / IOS XE SNMP Stack Overflow Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A stack-based buffer overflow in the SNMP subsystem of Cisco IOS and IOS XE: a crafted SNMP packet to UDP/161 overwrites the stac...

CVE-2023-20198-Scanner

Escáner de Cisco IOS XE CVE-2023-20198 Un script envoltorio en Python para escanear dispositivos Cisco IOS XE en busca de la Vulnerabilidad de Autenticación en la Interfaz Web CVE-2023-20198 utilizando un payload específico de curl. Características Escanea múltiples objetivos desde un archivo o...

Event-ID-193-Rule-Name-SOC231-Cisco-IOS-XE-Web-UI-ZeroDay-CVE-2023-20198-

此存储库没有 README。...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF 任意文件写入到 RCE PoC 推导过程与思考 适用范围：仅用于本地靶场、授权复现环境、漏洞验证和防护规则分析。不要对未授权目标使用。本文主要分析 CVE-2026-20230 的利用链条、可验证现象、判断逻辑和防护思路，不提供可直接复制执行的攻击报文、WebShell 内容或命令执行载荷。 1. 漏洞背景 CVE-2026-20230 是 Cisco Unified Communications Manager（Unified CM / CUCM）和 Cisco...

CIMCown

CIMCown CVE-2026-20200 Inyección de argumentos en Cisco IMC con RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Aviso: NSIDE-SA-2026-003 Entrada del blog:...

dlsw_exploit

DLSW Exploit Vulnerabilidad de divulgación de información en Cisco DLSw Hay un error en la implementación de DLSw de Cisco que afecta a los trenes de versiones 12.x y 15.x y que permite a un atacante remoto no autenticado recuperar el contenido parcial de los paquetes que atraviesan un router Cis...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 扫描器 一个安全、非破坏性的 Python 扫描器，用于检测 Cisco ASA / FTD WebVPN 认证绕过漏洞（CVE-2025-20362） 。 CVE-2025-20362 允许未经身份验证的攻击者通过路径遍历/规范化缺陷绕过认证并访问受限制的 WebVPN 资源。 概述 该工具用于测试受限制的 WebVPN 路径（包括会话、文件列表及配置相关的端点）是否可以在无需认证的情况下被访问。专为安全研究人员和管理员设计，用于评估他们授权测试的系统的暴露风险。 注意 ：此脚本仅执行 GET 请求 ，不尝试进行漏洞利用。 漏洞详情 CVE ID :...

TCP-32764

YA NO ACTUALIZARÉ ESTE REPOSITORIO MANUALMENTE Si quieres añadir un router a la lista, por favor haz un pull-request, también recuerda USAR EL POC y pegar el resultado en tu pull-request. Los clientes Telnet y otras soluciones pueden no ser relevantes se han reportado algunos falsos...

CVE-2019-1663

CVE-2019-1663 此存储库的目的是汇总我对CVE-2019-1663漏洞的研究， 该漏洞在Cisco RV110、RV130和RV225路由器的1.0.44.0版本中被发现。...

Cisco Nexus Dashboard Software Security Hardening Release: September 2026 (cisco-sa-hardening-ndw1-psFvnrg)

According to its self-reported version, Cisco Nexus Dashboard is affected by multiple vulnerabilities. - An improper access control vulnerability affecting authorization, authentication, privileges, and bypasses. CVE-2026-20322 - An improper neutralization of special elements used in a command...

Cisco Identity Services Engine (cisco-sa-ise-cmd-inj-e2CuZCYZ)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges toroot...

Cisco Secure Firewall Threat Defense Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A denial of service DoS vulnerability exists in the sftunnel functionality due to improper memory management. An unauthenticated, remote attacker can exploit this...

Cisco Identity Services Engine (cisco-sa-ise-multi-hrP9jQSQ)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-sql-inj-3QTKR947)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of user-supplied input...

Cisco Secure Firewall Management Center Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)

According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by multiple vulnerabilities. - A denial of service DoS vulnerability exists in the sftunnel functionality due to improper memory management. An unauthenticated, remote attacker can exploit this issue,...

Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the createDBLink method. The issue results from the lac...

Cisco Identity Services Engine (cisco-sa-ISE-ABP-VNSW7Tn5)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in an API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass authentication. CVE-2026-76460 Please see the included Cisco BIDs and Cisco Security Adviso...