CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Preuve de concept Analyse : https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ Le script Python abuse de la fonction de téléversement disponible sans authentification à l'URL /admin/files-upload/. Le script crée localement un dossier bin ...

CVE-2025-27714

An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unauthorized remote code execution or system compromise...