15 matches found
CVE-2023-49440
CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...
CVE-2025-60357
CVE-2025-60357- Inyección NoSQLMongoDB Descripción de la vulnerabilidad y del producto AhnLab EPP Management es una plataforma avanzada de protección de endpoints de próxima generación reconocida mundialmente, que integra gestión de parches, detección avanzada de malware, EDR y capacidades XDR. S...
EUVD-2025-210479
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
PT-2026-60765
Name of the Vulnerable Software and Affected Versions AhnLab EPP Management version 1.0.14.32-6249 Description A NoSQL injection issue exists in the 'eventlog/agentEvent/list' endpoint. NoSQL injection is a type of attack where malicious queries are injected into a NoSQL database, potentially...
CVE-2025-60357: Improper Neutralization of Special Elements in Data Query Logic
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management (Centralised Endpoint Security Management) versions 1.0.14.32-6249 and earlier are vulnerable to a NoSQL injection (MongoDB) in the /api/console/ems/eventlog/agentEvent/list endpoint. The flaw allows attackers to craft malicious queries in the request body to extract sensiti...
Exploit for CVE-2025-60357
CVE-2025-60357- NoSQLMongoDB Injection Vulnerab...
Exploit for CVE-2023-49440
CVE-2023-49440-POC Exploit Title: AhnLab EPP Management...
CVE-2023-49440
AhnLab EPP Management (Centralised Endpoint Security Management) version 1.0.15 and prior is vulnerable to Boolean-based and time-based SQL Injection within the web admin interface. The flaw resides in the improper manipulation of the preview parameter (and the list parameter) within the JSON str...
CVE-2023-49440
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...
CVE-2023-49440: Improper Neutralization of Special Elements used in an SQL Command
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...
AhnLab EPP 安全漏洞
AhnLab EPP is a set of endpoint security protection platform from AhnLab, Korea. A security vulnerability exists in AhnLab EPP version 1.0.15, which stems from an incorrect manipulation of the parameter preview and could lead to an SQL injection attack...