cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Herramienta de Detección de RCE en Ivanti Sentry Una herramienta integral de detección de prueba de concepto para probar vulnerabilidades de Ivanti Sentry relacionadas con bypass de autenticación y ejecución remota de código. Esta herramienta identifica sistemas vulnerables a...

policy_sentry

Policy Sentry IAM Least Privilege Policy Generator...

Ivanti Sentry - Authentication Bypass

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. id: CVE-2023-38035 info: name: Ivanti...

CVE-2023-38035

CVE-2023-38035 影响 Ivanti Sentry 的 CVE-2023-38035 POC 技术分析 关于该漏洞的技术根本原因分析可参阅我们的博客： https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive 概述 该 POC 利用一个未经验证的命令注入漏洞，以 root 用户身份执行任意命令。 执行环境不允许使用命令管道，且系统未自带易于滥用的二进制文件，因此可以通过串联命令，从类似...

CVE-2026-10520

CVE-2026-10520 Ivanti Sentry（原 MobileIron Sentry）是一款企业安全网关，它代理移动设备与企业后端资源（电子邮件、SharePoint 和内部 Web 应用程序）之间的流量。它强制执行 移动设备管理 （MDM）策略，终止加密移动会话，并为企业应用部署签发基于证书的身份验证。Sentry 实例通常面向互联网运行在 8443 端口上，暴露 MICS（Mobile Iron Configuration Service）管理 API。 CVE-2026-10520 是一个未经身份验证的操作系统命令注入 漏洞，影响 R10.5.2、R10.6.2 和...

sentryexploit

MobileIron Sentry CVE-2023-38035 信息提取 功能 提取公司名称和联系邮箱 漏洞验证 使用方法 root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Company: XXXX Ltd., contact: [email protected] 参考来源 Horizon3 深入分析...

CVE-2026-5027-Langflow

CVE-2026-5027 和 CVE-2026-10520 CVE-2026-25089 利用工具： 克隆 root@kitploit: git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow 使用 exploit.py 文件 自动测试和利用。 root@kitploit: python3 exploit.py -u https://target.com CLI 自定义设置 当 webshell 位于文件夹内时使用自己的 webshell：...

CVE-2026-83527

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

EUVD-2026-72812

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

CVE-2026-83527

CVE-2026-83527 is an Authentication Bypass vulnerability in Ivanti Sentry affecting versions before R10.8.2 , R10.7.3 , and R10.6.4 . A remote unauthenticated attacker can exploit it to gain administrative-level access , resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2026-83527

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

CVE-2026-10520

🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...

RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520 y CVE-2026-10523 Un generador de artefactos de detección de omisión de autenticación y ejecución remota de código en Ivanti Sentry. Consulte nuestra publicación del blog para obtener detalles técnicos. Detección en acción root@kitploit: $ python3 CVE-2026-10523.py --url...

watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520 和 CVE-2026-10523 一个 Ivanti Sentry 身份验证绕过和远程代码执行检测神器生成器。 详情请参阅我们的博客文章。 实战检测 root@kitploit: $ python3 watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523.py --url https://127.0.0.1 --cmd "uname -a" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | |...

PT-2026-87102

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

n8n-vulnerability-detection

n8n 漏洞检测 用于检测 n8n 漏洞的自动化 Nuclei 模板。 由@rxerium 创建 概述 适用于 n8n 工作流自动化的自动化 CVE 检测模板，每日监控并基于 GitHub Advisories、ProjectDiscovery 和 NVD 生成模板。 统计 ：3 个 CVE（2023 年）+ 10 个 CVE（2025 年）= 13 个模板 使用方法 root@kitploit: Scan a single target nuclei -t 2025/CVE-2025-58360.yaml -u https://target.com Scan with all...

CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ 简单用法 仅在安全且授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 授权的渗透测试环境 示例设置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate...

MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier contain...

EUVD-2026-66829

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...