watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

CVE-2025-4427 و CVE-2025-4428 سلسلة Ivanti EPMM أداة توليد Artifact للكشف عن سلسلة Pre-Auth RCE من نوع 1day في Ivanti EPMM الاكتشاف أثناء التنفيذ root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / ...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 إثبات المفهوم للاستغلال تم اكتشاف ثغرة الوصول غير المصادق إليه عبر واجهة برمجة التطبيقات API عن بُعد في Ivanti Endpoint Manager Mobile EPMM، المعروف سابقًا باسم MobileIron Core. تؤثر هذه الثغرة على جميع الإصدارات المدعومة – Version 11.4 وإصدارات 11.10 و11.9 و11.8. كما أن...

CVE-2023-35078

CVE-2023-35078 Shodan 搜索语法 你可以使用以下 Shodan 搜索语法来查找公开目标。 http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs 你可以使用以下命令将 Shodan API 返回的数据转换为适合检测脚本的格式： root@kitploit: jq -cr 'select.http.favicon.hash == 362091310 | if .ssl? then "https://" else "http://" end , .ipstr + ":" +...

CVE-2023-35078

CVE-2023-35078 Ce script vérifie éthiquement la présence de cve-2023-35078 en interrogeant le endpoint /ping de l'API Ivanti EPMM. /ping répond simplement avec la version VSP, plutôt que de tenter de récupérer les données des appareils ou des administrateurs. Utilisation : ./CVE-2023-35078 Ce...

CVE-2024-22026

CVE-2024-22026 POC d'exploitation pour CVE-2024-22026 affectant Ivanti EPMM « MobileIron Core » CVE-2024-22026 est une vulnérabilité d'élévation de privilèges locale dans les versions du serveur Ivanti EPMM anciennement MobileIron antérieures à 12.1.0.0, 12.0.0.0 et 11.12.0.1. Cette vulnérabilité...

CVE-2025-4427-CVE-2025-4428

CVE-2025-4428 et CVE-2025-4427 CVE-2025-4428 est une vulnérabilité d'exécution de code à distance après authentification dans le DeviceFeatureUsageReportQueryRequestValidator d'EPMM. Elle découle de la gestion non sécurisée des entrées fournies par l'utilisateur dans les messages d'erreur traités...

CVE-2023-35078

CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC Utilisation python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...

MobileIron Core - Remote Unauthenticated API Access

Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, Since CVE-2023-35082 arises from the same place as CVE-2023-35078, specifically the permissive nature of certain entries in the mifs web application’s security filter chain. id: CVE-2023-35082 info: name: MobileIron Core - Remote...

EUVD-2026-35444

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

Ivanti EPMM (Ivanti Endpoint Manager/Mobile EPMM) is affected by an OS command injection in versions before 12.9.0.1, 12.8.0.3, and 12.7.0.2. A remote authenticated attacker can execute arbitrary commands as root. The CVSS (3.1) vectors indicate network access, high impact on confidentiality, int...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

Ivanti EPMM 操作系统命令注入漏洞

Ivanti EPMM is a product developed by the American company Ivanti. It enables IT departments to create policies for mobile devices, applications, and content. Versions of Ivanti EPMM prior to 12.9.0.1, 12.8.0.3, and 12.7.0.2 contained a vulnerability related to operating system command injection...

CVE-2026-5787

An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates...

CVE-2026-5788

An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods...

CVE-2026-5786

An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access...

CVE-2026-6973

A configuration control vulnerability in the Ivanti Endpoint Manager Mobile before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to inject arbitrary Apache directives, leading to remote code execution...

EUVD-2026-28396

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution...

EUVD-2026-28394

An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates...