93 matches found
CVE-2025-60357
CVE-2025-60357- Inyección NoSQLMongoDB Descripción de la vulnerabilidad y del producto AhnLab EPP Management es una plataforma avanzada de protección de endpoints de próxima generación reconocida mundialmente, que integra gestión de parches, detección avanzada de malware, EDR y capacidades XDR. S...
GwisinMsi
GwisinMsi Este repositorio contiene el PoC del payload MSI utilizado en la entrada de blog. El payload se basa en el análisis del payload MSI del ransomware Gwisin realizado por el equipo ASEC de AhnLab en su entrada de blog. Configuración de compilación de DLL Proyecto Propiedades del proyecto...
CVE-2023-49440
CVE-2023-49440-POC root@kitploit: Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...
EUVD-2025-210479
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
PT-2026-60765
Name of the Vulnerable Software and Affected Versions AhnLab EPP Management version 1.0.14.32-6249 Description A NoSQL injection issue exists in the 'eventlog/agentEvent/list' endpoint. NoSQL injection is a type of attack where malicious queries are injected into a NoSQL database, potentially...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 is affected by a NoSQL (MongoDB) injection in the endpoint /api/console/ems/eventlog/agentEvent/list, disclosed as CVE-2025-60357. The root cause is injectable MongoDB queries allowing disclosure of sensitive information/PII via the eventlog/agentEvent/list i...
Exploit for CVE-2025-60357
CVE-2025-60357- NoSQLMongoDB Injection Vulnerab...
WordPress Country Blocker for AdSense plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Country Blocker for AdSense versions = 1.0...
CVE-2023-49440
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...
WordPress Anber Elementor Addon plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Banner button link vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Anber Elementor Addon versions = 1.0.1...
WordPress Peer Publish plugin <= 1.0 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Peer Publish versions = 1.0...
Exploit for CVE-2023-49440
CVE-2023-49440-POC Exploit Title: AhnLab EPP Management...
WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Posts Navigation Links for Sections and Headings versions = 1.0.1...
CVE-2023-49440
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...
CVE-2023-49440
AhnLab EPP Management (v1.0.15 and prior) is affected by a Boolean-based SQL injection in the web admin interface via the preview parameter, enabling access to the backend DB and potential RCE. Public PoCs/exploits exist (e.g., via /api/console/ems/query/report/preview) and exploit code is availa...
