3846 matches found
CVE-2020-3452
CVE-2020-3452 Cisco Adaptive Security Appliance ASA y Cisco Firepower Threat Defense FTD — Vulnerabilidad de recorrido de directorio de solo lectura en el servicio web Una vulnerabilidad en la interfaz de servicios web del software Cisco Adaptive Security Appliance ASA y del software Cisco...
ASVS
OWASP Estándar de Verificación de Seguridad en Aplicaciones Este trabajo está licenciado bajo una Licencia Internacional Creative Commons Atribución-CompartirIgual 4.0. 🎉🎉🎉 ¡Bienvenido a la Versión 5.0 del ASVS! 🎉🎉🎉 ¡Publicado EN VIVO en el escenario del Global AppSec EU Barcelona 2025!...
SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery
SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...
Edito CMS - Sensitive Data Leak
Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user. id: CVE-2024-4836 info: name: Edito CMS - Sensitive Data Leak author: s4e-io severity: high description: | Web...
Cisco-ASA-FTD-Web-Services-Traversal
Vulnerabilidad de Recorrido de Directorios en los Servicios Web del Software Cisco Adaptive Security Appliance y Firepower Threat Defense CVE-2020-3452 Uso: CVE-2020-3452.py https://target Descripción de la vulnerabilidad: Una vulnerabilidad en la interfaz de servicios web del software Cisco...
cleanldap
CleanLdap BOF para realizar consultas LDAP sigilosas sobre AD WS Argumentos Vamos al grano, aquí están los argumentos y lo que significan: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn" - if empty,...
CVE-2020-3452
CVE-2020-3452 Pequeño y tonto validador? en python para CVE-2020-3452 en dispositivos CISCO. Primera vez con python, por favor no me matéis. ;- USO python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DESCARGO DE RESPONSABILIDAD: Por favor, utiliza este script únicamente en...
Drupal-SA-CORE-2019-003
Drupal-SA-CORE-2019-003 CVE-2019-6340 Drupal SA-CORE-2019-003 CVE-2019-6340 CVE-2019-6340.md https://mp.weixin.qq.com/s/EQD4-K6HgBY9wdzeXeyzkg https://paper.seebug.org/821/ https://www.youtube.com/watch?v=QtLDDN0Duko nombre del enlace https://pbs.twimg.com/media/D0C-KiXX4AM2vR3.jpg:large...
WS-Attacker
WS-Attacker WS-Attacker es un marco modular para pruebas de penetración de servicios web. Es desarrollado por la Cátedra de Seguridad de Redes y Datos, Universidad Ruhr Bochum https://nds.rub.de/ y Hackmanit GmbH https://hackmanit.de/. La idea básica detrás de WS-Attacker es proporcionar una...
ZackAttack
===== ZackAttack! - Retransmitiendo NTLM como nadie ======= ¿Qué demonios es esto? Versión tl;dr: ZackAttack! es un nuevo conjunto de herramientas para hacer retransmisión de autenticación NTLM, a diferencia de cualquier otra herramienta que exista actualmente. = Entonces, ¿cómo es ZackAttack!...
CISCO-CVE-2020-3452-Scanner-Exploiter
Escáner y explotador de CISCO CVE-2020-3452 Escaneará los servidores objetivo desde shodan y luego encontrará los servidores vulnerables a CVE-2020-3452 lectura remota no autorizada de archivos en Cisco Adaptive Security Appliance y FTD. Acerca de Una vulnerabilidad en la interfaz de servicios we...
NtlmRelayToEWS
ntlmRelayToEWS Autor: Arno0x0x - @Arno0x0x ntlmRelayToEWS es una herramienta para realizar ataques de retransmisión NTLM en Exchange Web Services EWS. Inicia un SMBListener en el puerto 445 y un HTTPListener en el puerto 80, esperando la conexión entrante de la víctima. Una vez que la víctima se...
CVE-2020-6308-PoC
CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform Web Services, versiones 410, 420 y 430, permite a un atacante no autenticado inyectar valores arbitrarios como parámetros CMS para realizar búsquedas en la red interna que de otro modo no es accesible externamente. Sígueme e...
Cisco ASA/FTD Software - Cross-Site Scripting
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...
Cisco ASA Stack-based Buffer Overflow (CVE-2021-40118)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...
Cisco ASA Buffer Copy without Checking Size of Input (CVE-2021-1493)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to insufficient boundary checks...
Cisco ASA Exposure of Sensitive Information to an Unauthorized Actor (CVE-2020-3259)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could lead to the disclosure of confidential...
Cisco ASA Cross-site Scripting (CVE-2020-3580)
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...
Cisco ASA Improper Input Validation (CVE-2022-20745)
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to...