Cisco Patches Critical Flaw After PoC Exploit Code Release

A day after proof-of-concept PoC exploit code was published for a critical flaw in Cisco Security Manager, Cisco has hurried out a patch. Cisco Security Manager is an end-to-end security management application for enterprise administrators, which gives them the ability to enforce various security...

CVE-2020-27130

Cisco Security Manager (CSM) contains a path-traversal vulnerability (CVE-2020-27130) that allows an unauthenticated, remote attacker to download arbitrary files from an affected device. The root cause is improper validation of directory traversal sequences in requests to CSM, enabling crafted re...

YSoSerial Payloads Remote Code Execution (CVE-2020-11518; CVE-2020-27130; CVE-2022-29936)

YSoSerial is a collection of utilities and property-oriented programming "gadget chains" discovered in common java libraries that can, under the right conditions, exploit Java applications performing unsafe deserialization of objects. Successful exploitation of unsafe deserialization objects coul...