372 matches found
CVE-2024-29824
CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution Vulnerability Proof of concept exploit to blindly execute commands on vulnerable Ivanti EPM appliances. Blog Post Deep dive and indicators of compromise here:...
Ivanti-EPM-Coercion-Vulnerabilities
Ivanti EPM Coercion Vulnerabilities Proof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks. Blog Post Deep-dive analysis here:...
CVE-2023-28324
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Summary This POC abuses a vulnerability in AgentPortal.exe t...
cve-2024-50330-ivanti_epm_sqli_reproduction
CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to RCE Overview CVE-2024-50330 is a critical pre-authentication SQL injection vulnerability in Ivanti Endpoint Manager EPM that allows a remote unauthenticated attacker to achieve remote code execution on the target server. The vulnerabili...
CVE-2021-44529
CVE-2021-44529 CVE-2021-44529 Ivanti EPM 云服务设备 CSA 中的代码注入漏洞允许未经身份验证的用户以有限的权限（nobody）执行任意代码。...
Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive
A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...
Security Advisory Ivanti Endpoint Manager (EPM) August 2026
Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...
CVE-2024-34785
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34783
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34779
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
EUVD-2024-51395
Malicious code in bioql PyPI...
EUVD-2024-26820
Malicious code in bioql PyPI...
EUVD-2024-36633
Malicious code in bioql PyPI...
EUVD-2024-51390
Malicious code in bioql PyPI...
EUVD-2024-26824
Malicious code in bioql PyPI...
EUVD-2024-19656
Malicious code in bioql PyPI...
EUVD-2024-51397
Malicious code in bioql PyPI...
EUVD-2024-51394
Malicious code in bioql PyPI...