9 matches found
CVE-2024-29824
我已对 horizon3ai 中的脚本进行了一些优化（实际上只是添加了一个验证机制以确保准确性） 原始项目地址：https://github.com/horizon3ai/CVE-2024-29824 添加了 "-f / --file" 和 ThreadPool...
Metasploit Weekly Wrap-Up 07/12/2024
The Usual Suspects This release features two new exploits targeting old friends: Confluence and Ivanti. CVE-2024-21683 is a very easy vulnerability to exploit, but as pointed out in the AttackerKB Review, it requires authentication as a ‘Confluence Administrator.’ On the other hand, CVE-2024-2982...
Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution Exploit
Ivanti Endpoint Manager EPM 2022 SU5 and prior versions are susceptible to an unauthenticated SQL injection vulnerability which can be leveraged to achieve unauthenticated remote code execution. This module requires Metasploit: https://metasploit.com/download Current source:...
Exploit for SQL Injection in Ivanti Endpoint_Manager
CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution...
CVE-2024-29824
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...
CVE-2024-29824
CVE-2024-29824 affects Ivanti Endpoint Manager (EPM) Core server. A SQL injection in the RecordGoodApp flow (via un-sanitized md5 in ReportedGoodApps handling) allows an unauthenticated attacker on the same network to execute arbitrary code, enabling unauthenticated remote code execution. Vulnera...
CVE-2024-29824
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...
CVE-2024-29824
creationtimestamp| type| source ---|---|--- 2024-05-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1300 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463 2024-06-12 19:38:19+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8813 2024-06-13...
