38 matches found
itsm-exploit
Exploit per Ivanti Neurons for ITSM On Premise Questo script sfrutta diverse vulnerabilità che consentono a un attaccante non autenticato di ottenere accesso amministratore ed eseguire comandi remoti CVE-2023-46808 su Ivanti Neurons for ITSM On Premise. Per i dettagli tecnici, consulta Dettagli...
Vulnerabilities in Ivanti Neurons for ITSM
Ivanti has addressed several vulnerabilities in Ivanti Neurons for ITSM. A malicious individual could exploit these vulnerabilities to perform unauthorized actions, including executing arbitrary code on the server. Ivanti released an update in version 2026.2 to fix these vulnerabilities. See the...
CVE-2026-12744
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
CVE-2026-12745
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
CVE-2026-12645
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72815
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72814
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12648
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12648
CVE-2026-12648 is a Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM versions prior to 2026.2 . A remote authenticated attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the server, with low attack complexity and no user interaction...
CVE-2026-12650
Ivanti Neurons for ITSM before version 2026.2 is affected by a Deserialization of Untrusted Data vulnerability that allows a remote authenticated attacker to execute arbitrary code on the server. The flaw is rated CVSS 9.9 (Critical) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, reflectin...
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72810
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12651
Ivanti Neurons for ITSM versions before 2026.2 are affected by a Deserialization of Untrusted Data vulnerability (CVE-2026-12651). A remote authenticated attacker can leverage this flaw to execute arbitrary code on the server, rated CVSS 8.8 (HIGH) with high impact to confidentiality, integrity, ...
EUVD-2026-72806
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...