9 matches found
CVE-2023-49440
CVE-2023-49440-POC root@kitploit: Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...
CVE-2025-60357
CVE-2025-60357- NoSQLMongoDB Injection Vulnerability and Product description AhnLab EPP Management is a globally recognized next-generation advanced endpoint protection platform that integrates patch management, advanced malware detection, EDR, and XDR capabilities. NoSQLMongoDB Injection in was...
EUVD-2025-210479
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
PT-2026-60765
Name of the Vulnerable Software and Affected Versions AhnLab EPP Management version 1.0.14.32-6249 Description A NoSQL injection issue exists in the 'eventlog/agentEvent/list' endpoint. NoSQL injection is a type of attack where malicious queries are injected into a NoSQL database, potentially...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 is affected by a NoSQL (MongoDB) injection in the endpoint /api/console/ems/eventlog/agentEvent/list, disclosed as CVE-2025-60357. The root cause is injectable MongoDB queries allowing disclosure of sensitive information/PII via the eventlog/agentEvent/list i...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
Exploit for CVE-2025-60357
CVE-2025-60357- NoSQLMongoDB Injection Vulnerab...