CVE-2025-4428

CVE-2025-4427 और CVE-2025-4428 भेद्यता स्कैनर CVE-2025-4427 और CVE-2025-4428 एक्सप्लॉइट श्रृंखला के प्रति संवेदनशील सिस्टम की पहचान करने के लिए उन्नत पहचान उपकरण। यह सुरक्षा स्कैनर संवेदनशील एंडपॉइंट्स की पहचान करने में मदद करता है और प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइटेशन प्रदर्शित करता है।...

Log4Shell

Log4Shell This repo contains IoCs which are associated with exploitation of CVE-2021-4428...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

Chaîne Ivanti EPMM CVE-2025-4427 et CVE-2025-4428 Outil de génération d'artefacts de détection de la chaîne RCE Pre-Auth 1day Ivanti EPMM Détection en action root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | |...

CLEANSTART-2026-IJ07606 Security fixes in ztunnel-fips 1.27.8-r0

Package ztunnel-fips version 1.27.8-r0 fixes 3 vulnerabilities: ghsa-394x-vwmw-crm3, ghsa-9f94-5g5w-gf6r, CVE-2026-4428...

Amazon Linux 2023 : aws-nitro-tpm-tools (ALAS2023-2026-1905)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1905 advisory. A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate...

CVE-2007-4428

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/052a7f18-b676-4fd7-8db1-f632d9b68205...

MINI-4428-WMPJ-JCVP

Bulletin has no description...

CLEANSTART-2026-HH87643 Security fixes for CVE-2026-4428, ghsa-2gh3-rmm4-6rq5, ghsa-394x-vwmw-crm3, ghsa-434x-w66g-qw3r, ghsa-65p9-r9h6-22vj, ghsa-9f94-5g5w-gf6r, ghsa-hfpc-8r3f-gw53, ghsa-r6v5-fh4h-64xc, ghsa-rhfx-m35p-ff5j, ghsa-vw5v-4f2q-w9xf, ghsa-xwfj-jgwm-7wp5 applied in versions: 1.26.8-r0, 1.26.8-r1

Multiple security vulnerabilities affect the ztunnel-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KW90815 Security fixes for CVE-2026-4428, ghsa-2gh3-rmm4-6rq5, ghsa-394x-vwmw-crm3, ghsa-434x-w66g-qw3r, ghsa-65p9-r9h6-22vj, ghsa-9f94-5g5w-gf6r, ghsa-hfpc-8r3f-gw53, ghsa-r6v5-fh4h-64xc, ghsa-rhfx-m35p-ff5j, ghsa-vw5v-4f2q-w9xf, ghsa-xwfj-jgwm-7wp5 applied in versions: 1.27.5-r1, 1.27.6-r0, 1.27.6-r1, 1.27.8-r0

Multiple security vulnerabilities affect the ztunnel-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

jsonwebtoken-aws-lc (9.3.0), jwts (>=0.5.0, <=0.5.1) +1 more potentially affected by CVE-2026-4428 via aws-lc-sys (0.21.0)

aws-lc-sys CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-lc-sys and may be impacted: - jsonwebtoken-aws-lc 9.3.0 - jwts =0.5.0, =0.102.6, =0.102.8 Source cves: CVE-2026-4428 Source advisory: OSV:GHSA-9F94-5G5W-GF6R...

Linux Distros Unpatched Vulnerability : CVE-2026-4428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a...

CVE-2026-4428

creationtimestamp| type| source ---|---|--- 2026-03-19 22:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgywqm6hc2n 2026-03-20 06:55:24+00:00| seen| https://bsky.app/profile/alexpulver.bsky.social/post/3mhhwppiyli2e 2026-03-20 21:06:22+00:00| seen|...

jsonwebtoken-aws-lc (9.3.0), jwts (>=0.5.0, <=0.5.1) +1 more potentially affected by CVE-2026-4428 via aws-lc-sys (0.21.0)

aws-lc-sys CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-lc-sys and may be impacted: - jsonwebtoken-aws-lc 9.3.0 - jwts =0.5.0, =0.102.6, =0.102.8 Source cves: CVE-2026-4428 Source advisory: OSV:RUSTSEC-2026-0048...

EUVD-2026-4428

ALGO 8180 IP Audio Alerter Web UI Persistent Cross-Site Scripting Vulnerability. This vulnerability allows remote attackers to execute web requests with a target user's privileges on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this...

ECHO-5047-4428-BB74

Bulletin has no description...

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...

Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool

This script attempts to detect if Ivanti EPMM is vulnerable to CVE-2025-4427 and CVE-2025-4428. It affects versions 11.12.0.4 and prior, 12.3.0.1 and prior, 12.4.0.1 and prior, and 12.5.0.0 and prior...

CVE-2025-4428

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM...

CVE-2025-4428

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vhy3fbjz2 2025-05-13 16:30:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16168 2025-05-13 16:48:00+00:00| seen|...