CVE-2025-4428

CVE-2025-4427 与 CVE-2025-4428 漏洞扫描器 用于识别易受 CVE-2025-4427 和 CVE-2025-4428 漏洞链攻击的系统的先进检测工具。此安全扫描器帮助识别易受攻击的端点，并展示概念验证型利用。 功能特性 🛡️ 漏洞检测 ：通过签名分析识别易受攻击的系统 💻 命令执行 ：允许通过受控命令执行安全测试漏洞 🔄 重试机制 ：自动重试失败的连接 📄 日志系统 ：详细的日志记录，支持文件和终端输出 🌐 代理支持 ：可配置的代理设置，用于流量检查 🔧 多 Shell 支持 ：兼容 bash 和 sh 环境 📊 输出重定向 ：将结果保存到外部文件 安装 1...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool Detection in Action root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ /...

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...

Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool

This script attempts to detect if Ivanti EPMM is vulnerable to CVE-2025-4427 and CVE-2025-4428. It affects versions 11.12.0.4 and prior, 12.3.0.1 and prior, 12.4.0.1 and prior, and 12.5.0.0 and prior...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM...

CVE-2025-4427

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16170 2025-05-13 16:31:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vi4o3jrz2 2025-05-13 16:47:59+00:00| seen|...

CVE-2025-4427

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API...

Security Advisory Ivanti Endpoint Manager Mobile (EPMM) May 2025 (CVE-2025-4427 and CVE-2025-4428)

Last Modified Date Aug 23, 2026 10:42:43 PM...

CVE-2025-4427

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API. Recent assessments: remmons-r7 at May 22, 2025 5:21am UTC reported: On May 13, 2025, Ivanti published an adviso...