CVE-2018-6961

CVE-2018-6961 Python3 익스플로잇 VMware NSX SD-WAN Edge by VeloCloud 3.1.0 이전 버전에는 로컬 웹 UI 구성 요소에 명령 삽입 취약점이 존재합니다. 이 구성 요소는 기본적으로 비활성화되어 있으며 신뢰할 수 없는 네트워크에서는 활성화하지 않아야 합니다. VMware의 VeloCloud는 향후 릴리스에서 이 서비스를 제품에서 제거할 예정입니다. 이 문제를 악용하면 원격 코드 실행이 발생할 수 있습니다. 링크 CVE 세부 정보...

sdwan-harvester

SD-WAN Harvester 🌐 SD-WAN Internet Census Framework Дисклеймер Этот проект больше не поддерживается. Он стабилен, и вы по-прежнему можете использовать его для сканирования SD-WAN, но в настоящее время более предпочтительным и точным способом сканирования различных вещей в интернете не только...

CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN Обход аутентификации пиринга CVE-2026-20182 — Обход аутентификации пиринга Cisco Catalyst SD-WAN Инструмент оценки для авторизованного тестирования обхода аутентификации пиринга Cisco Catalyst SD-WAN Controller / Manager CVE-2026-20182. | ---|--- CVE|...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

VMware NSX SD-WAN Edge - Command Injection

VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

CVE-2026-20127

🛡️ CVE-2026-20127 — Contournement d'authentification Cisco Catalyst SD-WAN 📌 Aperçu CVE-2026-20127 est une vulnérabilité critique de contournement d'authentification affectant les composants Cisco Catalyst SD-WAN, y compris les contrôleurs et les systèmes de gestion. Un attaquant distant non...

CVE-2026-20182

CVE-2026-20182 — Обход аутентификации Cisco Catalyst SD-WAN Controller / Manager Эксплойт класса proof-of-concept для CVE-2026-20182 , критического CVSS 10.0 обхода аутентификации в службе vdaemon DTLS UDP/12346 на Cisco Catalyst SD-WAN Controller vSmart и Manager vManage. Раскрытие: 14 мая 2026...

CVE-2026-20245

🚨 CVE-2026-20245 - Cisco Catalyst SD-WAN Manager Escalade de privilèges Escalade de privilèges authentifiée via un fichier téléchargé malveillant Une vulnérabilité affectant Cisco Catalyst SD-WAN Manager qui permet à un attaquant authentifié disposant de privilèges d'administration d'exécuter des...

CVE-2018-14083

CVE-2018-14083...

MAL-008

MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 su Cisco SD-WAN Cisco SD-WAN v20.4.2.1 utilizza una vecchia versione di SSH OpenSSH7.6p1 suscettibile all'attacco “SSHtranger Things”. Se una vittima tenta di connettersi a un server SSH dannoso/compromesso, questo attacco può essere...

CVE-2025-54322-exploit

CVE-2025-54322: Exploit RCE pre-autenticazione per XSpeeder SXZOS Un exploit Proof-of-Concept PoC professionale per CVE-2025-54322 , una vulnerabilità critica di esecuzione remota di codice pre-autenticazione nel firmware XSpeeder SXZOS. Questa vulnerabilità è stata scoperta e divulgata dall'agen...

Cisco Catalyst SD-WAN Manager Information Disclosure (cisco-sa-sdwan-infodis-SPuJBDCe)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - An information disclosure vulnerability exists in the web-based management interface of Cisco Catalyst SD-WAN Manager due to insufficient access control enforcement for specific template types...

Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) relates to deficiencies in access control, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-20313

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20312

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20310

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20304

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...