CVE-2024-47071

CVE-2024-47071 concerns the OSS Endpoint Manager module for FreePBX. The vulnerability arises when the module’s activation allows authenticated web users to read system files with the webserver process permissions. This issue is addressed in version 14.0.4 of OSS Endpoint Manager. The connected d...

CVE-2024-47071 OSS Endpoint Manager allows unauthorized access to read system files

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4...

CVE-2024-47071 OSS Endpoint Manager allows unauthorized access to read system files

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4...

PT-2024-32389 · Unknown · Oss Endpoint Manager

Name of the Vulnerable Software and Affected Versions: OSS Endpoint Manager versions prior to 14.0.4 Description: The OSS Endpoint Manager module for FreePBX has an issue where its activation can allow authenticated web users to read system files without permission, using the permissions of the...

OSS Endpoint Manager 路径遍历漏洞

OSS Endpoint Manager is a FreePBX Contributed Modules open source module for FreePBX. A path traversal vulnerability exists in OSS Endpoint Manager version 14.0.3 and prior versions, which originates from allowing unauthorized access by an authenticated Web user to read system files with the...

The vulnerability of the LoadSlotsTable method in the Ivanti EPM endpoint management software allows a hacker to execute arbitrary code.

The vulnerability of the LoadSlotsTable method in the Ivanti EPM endpoint management software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

High-Risk Vulnerabilities in Common Enterprise Technologies

Rapid7 is warning customers about several high-risk vulnerabilities in common enterprise technologies that are attractive potential attack targets for both state-sponsored and financially motivated adversaries. We are advising customers to prioritize remediation for these issues on an expedited...

Ivanti Endpoint Manager 2022 - September Security Update

The version of Ivanti Endpoint Manager 2024 running on the remote host lacking the September 2024 Hotfix. It is, therefore, affected by mutliple vulnerabilities: - An unspecified SQL injection in Ivanti EPM before the 2024 September update allows a remote authenticated attacker with admin...

Ivanti Endpoint Manager Cloud Services Appliance < 4.6 Patch 519 Multiple Vulnerabilities

The version of Ivanti Endpoint Manager Cloud Services Appliance running on the remote host is prior to 4.6 Patch 519. It is, therefore, affected by multiple vulnerabilities: - An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remot...

Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager

CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Des...

Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...

Exploit for Improper Input Validation in Ivanti Endpoint_Manager

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...

Ivanti Endpoint Manager Code Issue Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. A code issue vulnerability exists in Ivanti Endpoint Manager version 2024 and 2022 SU5 and earlier versions, which arises from deserialization of untrusted data and allows remote unauthenticated attackers to...

Ivanti Endpoint Manager - September 2024 Security Update

The version of Ivanti Endpoint Manager running on the remote host is lacking the September 2024 Hotfix or Security Update 6. It is, therefore, affected by mutliple vulnerabilities: - An unspecified SQL injection in Ivanti EPM before the 2024 September update allows a remote authenticated attacker...

CVE-2024-32845

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager version 2024 and 2022 SU5 and earlier versions, which stems from an external XML entity XXE vulnerability in the Ivanti EPM Configuration W...

Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AgentPortal service. The issue results from the lack of proper validation of...

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker exploiting this vulnerability could remotely execute code...

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker exploiting this vulnerability could remotely execute code...

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker exploiting this vulnerability could remotely execute code...