CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the target servers from shodan and then find the vulnerable servers to CVE-2020-3452 Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading. About A vulnerability in the web services interface of Cisco Adaptive Security...

staystaystay

staystaystay staystaystay is a proof of concept exploit for CVE-2021-1585, a man in the middle or evil endpoint RCE issue affecting Cisco ASA Device Manager ASDM. The issue was originally discovered by Malcolm Lashley and disclosed in the summer of 2021. However, at the time I was looking at this...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense This utility is made for educational and ethical testing purposes only. Usage of this script for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey...

cve-2020-3452

cve-2020-3452 unauth file read in cisco asa & firepower. install git clone https://github.com/Loneyers/cve-2020-3452 && cd cve-2020-3452 && go build use ./cve-2020-3452 url.txt 40...

CVE-2020-3452

CVE-2020-3452 Unauthenticated file read in Cisco ASA & Cisco Firepower Saikat Karmakar | Nov : 2021 This will test if the given host is vulnerable to CVE 2020-3452 or not Requirements: requests termcolor Usage: darklord@kali: python3 cve-2020-3452.py -h usage: cve-2020-3452.py -h -u U -f F...

Cisco Firepower Threat Defense (FTD) Software Remote Access SSL VPN Tunnel DoS (cisco-sa-asaftd-tunnel-dos-s6mgkb75)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a vulnerability. - A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software...

Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...

Exploit for CVE-2026-20329

Cisco ASA & FTD Security Audit - Nuclei Templates CVE-2026-20...

Cisco ASA Improper Input Validation (CVE-2018-15454)

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3528)

A vulnerability in the OSPF Version 2 OSPFv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2021-34783)

A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This...

Cisco ASA Uncontrolled Resource Consumption (CVE-2021-34792)

A vulnerability in the memory management of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper resource...

Cisco ASA Missing Authorization (CVE-2024-20355)

A vulnerability in the implementation of SAML 2.0 single sign-on SSO for remote access VPN services in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to successfully establish a VPN session on an affecte...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3529)

A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The...

Cisco ASA Stack-based Buffer Overflow (CVE-2021-1573)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

Cisco ASA Origin Validation Error (CVE-2023-20275)

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper...

Cisco ASA Missing Required Cryptographic Step (CVE-2022-20742)

A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerability is due to an improper implementatio...

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-12673)

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

Cisco ASA Cross-site Scripting (CVE-2019-12695)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web- based management interface of an...

Cisco ASA Missing Release of Resource after Effective Lifetime (CVE-2024-20493)

A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several...