CVE-2024-22026

CVE-2024-22026 POC de exploit para CVE-2024-22026 que afecta a Ivanti EPMM "MobileIron Core" CVE-2024-22026 es una vulnerabilidad de escalada de privilegios local en las versiones del servidor Ivanti EPMM anteriormente MobileIron anteriores a 12.1.0.0, 12.0.0.0 y 11.12.0.1. Esta vulnerabilidad...

Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection

Ivanti Endpoint Manager Mobile EPMM versions 12.5.0.0 through 12.7.0.0 contain a code injection vulnerability that allows unauthenticated remote attackers to achieve arbitrary code execution on the target system. id: CVE-2026-1281 info: name: Ivanti EPMM =12.7.0.0 - Unauthenticated Code Injection...

CVE-2026-1281-Ivanti-EPMM-RCE

CVE-2026-1281 y CVE-2026-1340 - Ivanti EPMM RCE Pre-Auth ⚠️ AVISO LEGAL: Este PoC se proporciona únicamente con fines educativos y de investigación en seguridad. Su uso sin autorización explícita es ilegal. 🎯 Descripción Proof of Concept PoC completo para la explotación de las vulnerabilidades...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Objetivo Dummy de RCE pre-auth de Ivanti EPMM Una aplicación de demostración simple que muestra cómo reproducir la vulnerabilidad de RCE pre-auth de Ivanti EPMM CVE-2026-1281 / CVE-2026-1340 con fines educativos y de investigación en seguridad. Resumen de la Vulnerabilidad Esta vulnerabilidad...

CVE-2023-35078

CVE-2023-35078 此脚本通过请求 Ivanti EPMM API 的 /ping 端点，以道德方式检查 cve-2023-35078 的存在。 /ping 仅响应 VSP 版本，而非尝试获取设备或管理员数据。 用法：./CVE-2023-35078 此脚本假设使用默认端口的 https 连接。 设置 设置虚拟环境：python3 -m venv env 激活环境：source env/bin/activate 安装依赖：pip3 install -r requirements.txt...

CVE-2023-35078

CVE-2023-35078 Shodan 搜索语法 你可以使用以下 Shodan 搜索语法来查找公开目标。 http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs 你可以使用以下命令将 Shodan API 返回的数据转换为适合检测脚本的格式： root@kitploit: jq -cr 'select.http.favicon.hash == 362091310 | if .ssl? then "https://" else "http://" end , .ipstr + ":" +...

CVE-2023-35078

CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC 用法 python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 漏洞利用 POC CVE-2023-35078 远程未认证 API 访问漏洞已在 Ivanti Endpoint Manager Mobile EPMM（原名 MobileIron Core）中被发现。该漏洞影响所有受支持的版本 – 版本 11.4 的 11.10、11.9 和 11.8 发布版。较旧的版本/发布版也存在风险。 该漏洞允许未经授权的远程（面向互联网）行为者可能访问用户的个人身份信息并对服务器进行有限的更改。 用法 root@kitploit: python cve202335078poc.py -u http:// python...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

Cadena CVE-2025-4427 y CVE-2025-4428 Ivanti EPMM Herramienta generadora de artefactos de detección de 1 día para la cadena RCE Pre-Autenticación de Ivanti EPMM Detección en Acción root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ ...

EUVD-2026-35444

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...

CVE-2026-10727

Ivanti EPMM (Ivanti Endpoint Manager/Mobile EPMM) is affected by an OS command injection in versions before 12.9.0.1, 12.8.0.3, and 12.7.0.2. A remote authenticated attacker can execute arbitrary commands as root. The CVSS (3.1) vectors indicate network access, high impact on confidentiality, int...

Ivanti EPMM 操作系统命令注入漏洞

Ivanti EPMM is a product developed by the American company Ivanti. It enables IT departments to create policies for mobile devices, applications, and content. Versions of Ivanti EPMM prior to 12.9.0.1, 12.8.0.3, and 12.7.0.2 contained a vulnerability related to operating system command injection...

CVE-2026-5787

An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates...

CVE-2026-5788

An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods...

CVE-2026-5786

An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access...

CVE-2026-6973

A configuration control vulnerability in the Ivanti Endpoint Manager Mobile before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to inject arbitrary Apache directives, leading to remote code execution...

EUVD-2026-28394

An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates...