CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

372 matches found

Kitploit•added 2026/09/04 4:14 p.m.•3 views

CVE-2023-28324

CVE-2023-28324 Ivanti EPM에 영향을 미치는 CVE-2023-28324에 대한 POC입니다. 기술 분석 취약점에 대한 기술적 근본 원인 분석은 블로그에서 확인할 수 있습니다: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ 요약 이 POC는 AgentPortal.exe의 취약점을 악용하여 임의의 명령을 실행합니다. 이 POC가 작동하려면 Ivanti EPM 설치본에서 AgentPortal.exe 및...

9.8CVSS8.8AI score0.12904EPSS

SaveExploits5

Kitploit•added 2026/09/04 9:07 a.m.•5 views

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM における SQL インジェクションによる RCE 概要 CVE-2024-50330 は、Ivanti Endpoint Manager EPM における重大な事前認証 SQL インジェクションの脆弱性であり、リモートの未認証攻撃者がターゲットサーバー上でリモートコード実行を達成することを可能にします。この脆弱性は 2024 年 11 月のセキュリティアップデートで開示され、修正されました。技術的詳細 CVE : CVE-2024-50330 CWE : CWE-89 SQL インジェクション...

9.8CVSS9.1AI score0.403EPSS

SaveExploits1

Kitploit•added 2026/09/04 9:07 a.m.•2 views

Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM 認証情報強制の脆弱性 Ivanti EPM CVE-2024-13159 およびその他の脆弱性の概念実証エクスプロイト。リレー攻撃での使用のために、Ivanti EPM マシン認証情報の認証なしでの強制を可能にします。ブログ記事詳細な分析はこちら: https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/ 使用方法 root@kitploit: % python3...

9.8CVSS9AI score0.99992EPSS

SaveExploits1

Kitploit•added 2026/09/04 5:16 a.m.•3 views

CVE-2024-29824

CVE-2024-29824: Ivanti EPM SQL Injection 원격 코드 실행 취약점 취약한 Ivanti EPM 장비에서 명령을 블라인드 방식으로 실행하기 위한 개념 증명 익스플로잇입니다. 블로그 게시물 심층 분석 및 침해 지표는 다음에서 확인할 수 있습니다: https://www.horizon3.ai/attack-research/attack-blogs/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability 사용법...

9.6CVSS9.7AI score0.99951EPSS

SaveExploits5

Kitploit•added 2026/09/03 1:37 a.m.•6 views

CVE-2021-44529

CVE-2021-44529 CVE-2021-44529 Ivanti EPM 云服务设备 CSA 中的代码注入漏洞允许未经身份验证的用户以有限的权限（nobody）执行任意代码。...

9.8CVSS9AI score0.99105EPSS

SaveExploits9

Nuclei•added 2026/08/24 5:53 a.m.•111 views

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

9.8CVSS9AI score0.99992EPSS

SaveExploits1References2

Ivanti•added 2026/08/11 1:58 p.m.•18 views

Security Advisory Ivanti Endpoint Manager (EPM) August 2026

Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...

8.1CVSS5.9AI score0.0089EPSS

SaveExploits0

RedhatCVE•added 2026/01/09 8:35 a.m.•15 views

CVE-2024-34785

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.25389EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•18 views

CVE-2024-34783

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.43356EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•14 views

CVE-2024-34779

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.24005EPSS

SaveExploits0References1