Cisco Identity Services Engine Remote Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the attacker must have valid administrative credentials. For more...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability

A vulnerability in Datagram TLS DTLS message handling of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause a...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities

Multiple vulnerabilities in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device...

Cisco Identity Services Engine RADIUS Denial of Service Vulnerability

A vulnerability in the RADIUS feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this...

Cisco Identity Services Engine SQL Injection Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow a remote attacker to conduct SQL injection attacks on an affected device. For more information about these vulnerabilities, see the Details "details" section of this advisory. Cisco has released software updates that addre...

Cisco Identity Services Engine Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow a remote attacker to bypass authentication to the REST API, achieve remote code execution, perform SQL injection, and conduct XML External Entity injection attacks on an...

Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Firewall Adaptive Security Appliance ASA Software, Cisco Secure Firewall Threat Defense FTD Software and Cisco Secure Firewall Management Center FMC Software engineering team has conducted a...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC 严重 RCE 漏洞 Cisco Secure Firewall Management Center 中的未认证远程代码执行 📌 概述 一个严重的预认证 Java 反序列化漏洞 ，允许远程攻击者在 Cisco FMC 设备上实现 root 级代码执行 。 关键信息 属性| 详情 ---|--- 严重程度| 严重 CVSS 评分| 10.0 漏洞类型| Java 反序列化 已被在野利用| 是（勒索软件攻击活动） 补丁可用| 是 ✨ 安全的漏洞检测工具 一个美观、安全且可靠的 CVE-2026-20131 检测工具。 📸 演示 功能特性...

Hardcoded Admin Credentials For Cisco Smart Licensing Utility API

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...

CVE-2020-3452-Cisco-Scanner

CVE-2020-3452 - Cisco ASA 扫描器 扫描 CVE-2020-3452 - 影响运行 anyconnect 的 Cisco ASA 防火墙的未认证路径遍历 https://vulners.com/cve/CVE-2020-3452 参考文档： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ro-path-KJuQhB86 https://twitter.com/aboul3la/status/1286012324722155525 免责声明：...

CVE-2026-20127

CVE-2026-20127 概述 针对 Cisco Catalyst SD-WAN Controller 认证绕过漏洞 CVE-2026-20127 的漏洞利用程序。 该漏洞利用程序针对 vbondprocchallengeackack 处理器。它发送一条伪造的 CHALLENGEACKACK 消息（msgtype=10），其中包含攻击者控制的 verifystatus=1 字节，直接强制服务器在对端条目上设置 authenticated=1。 工作原理 在正常的 DTLS 控制平面握手过程中： 1. 客户端通过 DTLS 使用证书连接 2. 服务器发送...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Cisco ASA 和 FTD 未授权远程文件读取 Nmap NSE 脚本...

cve-2018-4013

cve-2018-4013 cve-2018-4013 poc 简要复现 reference TALOS-2018-0684 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence TODO : exploit...

cve-2026-20127

CVE-2026-20127 扫描器 概述 该项目是一个基于 Windows 的网络扫描工具，使用 C++ 编写，旨在识别潜在的 Cisco SD-WAN / vManage 类服务，并针对标记为 CVE-2026-20127 的引用问题执行漏洞检查。 功能 IP 范围扫描（起始 IP → 结束 IP） 针对 Cisco SD-WAN / vManage 特征的服务指纹识别 HTTP 响应头与响应体分析 向疑似管理端点发送测试请求 根据响应内容与状态码检测潜在暴露风险 简单的交互式 CLI 界面 对敏感端点执行二次请求： /dataservice/client/admin/setting...

CVE-2026-20180

Cisco ISE RCE: Análisis Avanzado de Explotación y Remediación 📋 Tabla de Contenidos 1. Resumen Ejecutivo 2. Análisis de Superficie de Ataque 3. Vectores de Explotación 4. Técnicas de Evasión Avanzada 5. Impacto Sistémico en Arquitecturas Zero Trust 6. Estrategia de Remediación 7. Investigación...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — 检测与响应工具包 针对 CVE-2026-76461 的检测、狩猎和修复资源，该漏洞是 Cisco Secure Email Gateway SEG 的 Cisco AsyncOS 中的一个严重 SQL 注入漏洞。 ⚠️ 免责声明 本仓库仅包含防御性内容 ：Sigma 规则、YARA 规则、技术分析、入侵指标以及修复指南。 它不包含漏洞利用代码、PoC 或武器化工具。 该漏洞已被添加到 CISA 的已知被利用漏洞 KEV 目录中。在发布时，不存在公开的可运行 PoC。请仅在授权环境中使用这些资源。 📌 漏洞摘要 字段| 值 ---|--- CVE|...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....

CVE-2018-0296

Cisco自适应安全设备 - 路径遍历 CVE-2018-0296 作者: Yassine Aboukir 在Cisco ASA中发现的一个安全漏洞，允许攻击者通过目录遍历技术，在无需认证的情况下查看敏感系统信息。 受影响产品 该漏洞影响运行在以下Cisco产品上的Cisco ASA软件和Cisco Firepower威胁防御（FTD）软件： root@kitploit: 3000 Series Industrial Security Appliance ISA ASA 1000V Cloud Firewall ASA 5500 Series Adaptive Security...