
CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager
PoC de CVE-2026-20224: inyeccion XXE para lectura de archivos en Cisco Catalyst SD-WAN Manager (no autenticado).

PoC de CVE-2026-20224: inyeccion XXE para lectura de archivos en Cisco Catalyst SD-WAN Manager (no autenticado).

Detailed technical analysis and proof-of-concept exploit for CVE-2023-20209, a post-authentication remote code execution vulnerability in Cisco…

Python script to scan networks for Cisco IOS XE devices vulnerable to CVE-2023-20198, detecting implants via HTTP status and response analysis.

Cisco IP Phone 11.7 - Denial of Service (PoC)

Exploit script for CVE-2020-3452, a path traversal vulnerability in Cisco ASA/FTD appliances, enabling unauthorized file read via crafted HTTP…

Automated XSS validation pipeline for CVE-2020-3580 with Shodan-based discovery, scope matching, and approval-gated canary testing for Cisco ASA/FTD…

PoC and exploit scripts for CVE-2023-20048 - Remote Code Execution vulnerability affecting Cisco RV series routers. Includes a vulnerability checker…

Exploit for CVE-2023-20198, a critical privilege escalation vulnerability in Cisco IOS XE web UI, enabling unauthorized access and remote code…

Cisco VPN Client - Integer Overflow Denial of Service

Proof-of-concept remote code execution exploit for CVE-2017-3881 affecting Cisco Catalyst switches with telnet enabled, including detailed exploit…

Proof-of-concept exploit for CVE-2022-20699, an unauthenticated remote code execution vulnerability in Cisco AnyConnect VPN with rwx stack.

Proof-of-concept exploit for CVE-2023-20198 targeting Cisco IOS XE Web UI. Enables unauthenticated remote command execution, configuration retrieval,…

PoC for CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP

Proof-of-concept exploit for CVE-2024-20467, a remote denial-of-service vulnerability in Cisco IOS XE Software. Sends crafted fragmented IPv4 packets…

Cisco Bug: CSCur90888 - Cisco UCS Manager Remote Command Execution Vulnerability

Shell script exploiting CVE-2020-3452 for directory traversal on Cisco ASA/FTD appliances to enumerate and download files from the web directory.

Proof-of-concept exploit for CVE-2020-3187 targeting Cisco ASA/FTD session password disclosure via crafted HTTP cookie header.

Case Study: SSHtranger Things (CVE-2019-6111, CVE-2019-6110) in Cisco SD-WAN