CVE-2024-22026

CVE-2024-22026 Эксплойт POC для CVE-2024-22026, затрагивающий Ivanti EPMM "MobileIron Core" CVE-2024-22026 — это уязвимость локального повышения привилегий в версиях сервера Ivanti EPMM ранее MobileIron до 12.1.0.0, 12.0.0.0 и 11.12.0.1. Данная уязвимость позволяет локальному атакующему получить...

CVE-2023-35078

CVE-2023-35078 Этот скрипт этично проверяет наличие cve-2023-35078, запрашивая конечную точку /ping API Ivanti EPMM. /ping просто отвечает версией VSP, а не пытается извлечь данные об устройствах или администраторах. Использование: ./CVE-2023-35078 Этот скрипт предполагает соединения по https на...

CVE-2023-35078

CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: jq -cr 'select.http.favicon.hash ==...

CVE-2025-4427-CVE-2025-4428

CVE-2025-4428 & CVE-2025-4427 CVE-2025-4428 is a post-auth remote code execution vulnerability in EPMM's DeviceFeatureUsageReportQueryRequestValidator. It arises from the unsafe handling of user-supplied input within error messages processed via Spring’s AbstractMessageSource, which allows...

CVE-2023-35078

CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC Usage python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Эксплойт POC Уязвимость удаленного неаутентифицированного доступа к API CVE-2023-35078 обнаружена в Ivanti Endpoint Manager Mobile EPMM, ранее известном как MobileIron Core. Эта уязвимость затрагивает все поддерживаемые версии – версии 11.4, выпуски 11.10, 11.9 и 11.8. Старые...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

Цепочка CVE-2025-4427 и CVE-2025-4428 Ivanti EPMM Инструмент для генерации артефактов обнаружения 1day цепочки Pre-Auth RCE для Ivanti EPMM Обнаружение в действии $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / /...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM 사전 인증 RCE 더미 타깃 Ivanti EPMM 사전 인증 RCE 취약점CVE-2026-1281 / CVE-2026-1340을 교육 및 보안 연구 목적으로 재현하는 방법을 보여주는 간단한 데모 애플리케이션입니다. 취약점 개요 이 취약점은 Bash 산술 확장arithmetic expansion 동작을 악용합니다. 다른 변수에 대한 참조를 포함하는 변수가 산술 컨텍스트에서 사용되고, 해당 참조 변수가 명령 치환command substitution이 포함된 배열 인덱스를 포함할 때 명령이 실행됩니다. 악용 체...

CVE-2026-1281-Ivanti-EPMM-RCE

CVE-2026-1281 и CVE-2026-1340 — Ivanti EPMM Pre-Auth RCE ⚠️ ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: Данный PoC предоставляется исключительно в образовательных целях и для исследований в области безопасности. Использование без явного разрешения незаконно. 🎯 Описание Полный Proof of Concept PoC для эксплуатации...

Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection

Ivanti Endpoint Manager Mobile EPMM versions 12.5.0.0 through 12.7.0.0 contain a code injection vulnerability that allows unauthenticated remote attackers to achieve arbitrary code execution on the target system. id: CVE-2026-1281 info: name: Ivanti EPMM =12.7.0.0 - Unauthenticated Code Injection...

The vulnerability of the endpoint management application for mobile devices and mobile applications, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), is related to lack of access control. This allows a malicious individual to increase their privileges.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to elevate their...

MobileIron Core - Remote Unauthenticated API Access

Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, Since CVE-2023-35082 arises from the same place as CVE-2023-35078, specifically the permissive nature of certain entries in the mifs web application’s security filter chain. id: CVE-2023-35082 info: name: MobileIron Core - Remote...

EUVD-2026-35444

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

Ivanti EPMM (Ivanti Endpoint Manager/Mobile EPMM) is affected by an OS command injection in versions before 12.9.0.1, 12.8.0.3, and 12.7.0.2. A remote authenticated attacker can execute arbitrary commands as root. The CVSS (3.1) vectors indicate network access, high impact on confidentiality, int...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

Ivanti EPMM 操作系统命令注入漏洞

Ivanti EPMM is a product developed by the American company Ivanti. It enables IT departments to create policies for mobile devices, applications, and content. Versions of Ivanti EPMM prior to 12.9.0.1, 12.8.0.3, and 12.7.0.2 contained a vulnerability related to operating system command injection...

CVE-2026-5787

An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates...