itsm-exploit

针对 Ivanti Neurons for ITSM（本地部署版）的漏洞利用 此脚本利用多个漏洞，这些漏洞允许未经身份验证的攻击者在 Ivanti Neurons for ITSM（本地部署版） 上获取管理员访问权限并执行远程命令（CVE-2023-46808）。 有关技术细节，请参阅 技术细节 受影响版本 版本 2021.1.0.2021060601 至 2020.4.0.2021033001 受影响，更早的版本很可能也存在漏洞。 使用方法 安装依赖： root@kitploit: pip install requests defusedxml 列出租户 root@kitploit:...

CVE-2026-12744

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12745

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12647

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12645

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12650

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12647

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before version 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server. The flaw enables privilege escalation beyond the attacker's initial credentials, reflected in a CVSS 3.1 score of 9.9 (Critical) w...

CVE-2026-12647

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

EUVD-2026-72815

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

EUVD-2026-72814

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12646

Ivanti Neurons for ITSM before version 2026.2 is affected by a Missing Authorization vulnerability that allows a remote authenticated attacker to execute arbitrary code on the server . The CVSS 3.1 base score is 9.9 (CRITICAL) , with a Changed Scope and High impact to confidentiality, integrity, ...

CVE-2026-12645

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12645

CVE-2026-12645 is a Missing Authorization vulnerability in Ivanti Neurons for ITSM affecting versions before 2026.2 . A remote authenticated attacker can leverage this flaw to execute arbitrary code on the server, with the scope changed and high impact on confidentiality, integrity, and availabil...

EUVD-2026-72813

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12648

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12648

CVE-2026-12648 is a Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM versions prior to 2026.2 . A remote authenticated attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the server, with low attack complexity and no user interaction...

CVE-2026-12650

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

EUVD-2026-72810

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

CVE-2026-12650

Ivanti Neurons for ITSM before version 2026.2 is affected by a Deserialization of Untrusted Data vulnerability that allows a remote authenticated attacker to execute arbitrary code on the server. The flaw is rated CVSS 9.9 (Critical) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, reflectin...

CVE-2026-12651

Ivanti Neurons for ITSM versions before 2026.2 are affected by a Deserialization of Untrusted Data vulnerability (CVE-2026-12651). A remote authenticated attacker can leverage this flaw to execute arbitrary code on the server, rated CVSS 8.8 (HIGH) with high impact to confidentiality, integrity, ...