426 matches found
Ivanti-EPM-Coercion-Vulnerabilities
Ivanti EPM Coercion Vulnerabilities Proof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks. Blog Post Deep-dive analysis here:...
CVE-2023-28324
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Summary This POC abuses a vulnerability in AgentPortal.exe t...
CVE-2024-29824
CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution Vulnerability Proof of concept exploit to blindly execute commands on vulnerable Ivanti EPM appliances. Blog Post Deep dive and indicators of compromise here:...
cve-2024-50330-ivanti_epm_sqli_reproduction
CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to RCE Overview CVE-2024-50330 is a critical pre-authentication SQL injection vulnerability in Ivanti Endpoint Manager EPM that allows a remote unauthenticated attacker to achieve remote code execution on the target server. The vulnerabili...
CVE-2021-44529
CVE-2021-44529 A code injection vulnerability in CVE-2021-44529 Ivanti EPM Cloud Services Appliance CSA allows unauthenticated users to execute arbitrary code with limited privileges nobody...
Ivanti EPM CSA Code Injection (CVE-2021-44529)
Exploits CVE-2021-44529 in Ivanti EPM Cloud Services Appliance: crafted cookie values to /client/index.php execute arbitrary PHP code without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPM CSA unauthenticated code injection CVE-2021-44529.""" import base64 import re from...
Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive
A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...
Security Advisory Ivanti Endpoint Manager (EPM) August 2026
Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...
Ivanti EPM Cloud Services Appliance Code Injection Detection
Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPM Cloud Services Appliance C...
CVE-2024-34785
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34783
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34779
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
EUVD-2024-49005
Malicious code in bioql PyPI...
EUVD-2024-51390
Malicious code in bioql PyPI...
EUVD-2024-51389
Malicious code in bioql PyPI...
EUVD-2024-51398
Malicious code in bioql PyPI...
EUVD-2024-51395
Malicious code in bioql PyPI...
EUVD-2024-51394
Malicious code in bioql PyPI...