Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow avant authentification RCE CVE-2025-0282 Ceci est volontairement cassé de manière non triviale et nécessitera des efforts pour fonctionner comme décrit précédemment dans notre article de blog sur les techniques d'exploitation. Pour...

CVE-2023-46805

Название: Доказательство концепции для CVE-2023-46805 — Только для образовательных целей Лицензия: Эта работа размещена в соответствии с Международной лицензией Creative Commons Attribution 4.0 CC BY 4.0. Вы можете свободно делиться, копировать, распространять и передавать эту работу, адаптироват...

Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation

Exploitation du client VPN Ivanti/Pulse de la CVE-2023-35080 menant à une élévation de privilèges Code lié à l'exploitation de la CVE-2023-35080 qui tire parti d'une primitive d'écriture dans le pilote noyau du client VPN Ivanti/Pulse sous Windows. Cette primitive d'écriture conduit à une élévati...

Ivanti Avalanche - Remote Code Execution

An unauthenticated attacker could achieve the code execution through a RemoteControl server. id: CVE-2023-32563 info: name: Ivanti Avalanche - Remote Code Execution author: princechaddha severity: critical description: An unauthenticated attacker could achieve the code execution through a...

Ivanti EPMM < 12.8.0.0 - Remote Code Execution

Ivanti Endpoint Manager Mobile contains a code injection vulnerability allowing unauthenticated attackers to execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-1340 info: name: Ivanti EPMM 12.8.0.0 - Remote Code Execution author: 0xAkoko severity: critical...

Pulse Connect Secure SSL VPN Arbitrary File Read

Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 all contain an arbitrary file reading vulnerability that could allow unauthenticated remote attackers to send a specially crafted URI to gain improper access. id: CVE-2019-11510 info: name: Pulse...

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL 인젝션을 통한 RCE 개요 CVE-2024-50330은 Ivanti Endpoint Manager EPM의 치명적인 인증 전 SQL 인젝션 취약점으로, 원격의 인증되지 않은 공격자가 대상 서버에서 원격 코드 실행을 달성할 수 있게 합니다. 이 취약점은 2024년 11월 보안 업데이트에서 공개 및 패치되었습니다. 기술적 세부 사항 CVE : CVE-2024-50330 CWE : CWE-89 SQL 인젝션 CVSS : 치명적 CVSS 3.x 점수...

CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ Utilisation simple Utilisez ce projet uniquement dans des environnements sûrs et autorisés tels que : Machines virtuelles locales Conteneurs Docker Configurations de laboratoire isolées Environnements de test d'intrusion autorisés Exemple...

CVE-2023-35078

CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC Utilisation python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...

Ivanti Avalanche 6.3.2 - Local File Inclusion

Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. id: CVE-2021-30497 info: name: Ivanti Avalanche 6.3.2 - Local File Inclusion author: gy741 severity: high description: Ivanti Avalanch...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

Ivanti vTM - Authentication Bypass

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel. id: CVE-2024-7593 info: name: Ivanti vTM - Authentication Bypass author: gy741 severity: critical...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcard endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC pat...

Ivanti Avalanche SmartDeviceServer - XML External Entity

XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server. id: CVE-2024-38653 info: name: Ivanti Avalanche SmartDeviceServer - XML External Entity author: DhiyaneshDK severity: high description: | XXE in SmartDeviceServer in...

Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass

Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, through 11.10 allows remote attackers to obtain PII, add an administrative account, and change the configuration because of an authentication bypass, as exploited in the wild in July 2023. A patch is available. id: CVE-2023-35078 info...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForSingleFile endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC...

Ivanti EPM - Remote Code Execution

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. id: CVE-2024-29824 info: name: Ivanti EPM - Remote Code Execution author: DhiyaneshDK severity: critical description: | ...

Exploit for Out-of-bounds Write in Ivanti Connect_Secure

Step 1: Environment Setup Permissions & Execution Scrip...

Ivanti EPM Cloud Services Appliance Code Injection

Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. id: CVE-2021-44529 info: name: Ivanti EPM Cloud Services Appliance Code Injection...