93 matches found
CVE-2025-60357
CVE-2025-60357- NoSQL（MongoDB）インジェクション 脆弱性および製品説明 AhnLab EPP Managementは、パッチ管理、高度なマルウェア検出、EDR、XDR機能を統合した、世界的に認知された次世代の高度なエンドポイント保護プラットフォームです。 NoSQL（MongoDB）インジェクション が、AhnLab EPP Management...
GwisinMsi
GwisinMsi このリポジトリには、ブログ記事で使用された MSI ペイロードの PoC が含まれています。このペイロードは、AhnLab ASEC チームのブログ記事による Gwisin ランサムウェアの MSI ペイロード分析に基づいています。 DLL コンパイル設定 プロジェクト プロジェクトのプロパティ C/C++ プリプロセッサ プリプロセッサの定義 - CRTSECURENOWARNINGS プロジェクト プロジェクトのプロパティ 文字セット マルチバイト クレジットと参考文献 HuskyHacks - MSI ペイロードに関するブログ記事 ASEC AhnLab -...
CVE-2023-49440
CVE-2023-49440-POC root@kitploit: Exploit Title: AhnLab EPP Management（統合型エンドポイントセキュリティ管理）- RCE に繋がる Boolean ベースの SQL インジェクション 日付: 2023年7月16日 CVE : CVE-2023-49440 ベンダーホームページ: https://www.ahnlab.com/en ソフトウェアリンク:https://www.ahnlab.com/ko/product/epp-management...
EUVD-2025-210479
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
PT-2026-60765
Name of the Vulnerable Software and Affected Versions AhnLab EPP Management version 1.0.14.32-6249 Description A NoSQL injection issue exists in the 'eventlog/agentEvent/list' endpoint. NoSQL injection is a type of attack where malicious queries are injected into a NoSQL database, potentially...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 is affected by a NoSQL (MongoDB) injection in the endpoint /api/console/ems/eventlog/agentEvent/list, disclosed as CVE-2025-60357. The root cause is injectable MongoDB queries allowing disclosure of sensitive information/PII via the eventlog/agentEvent/list i...
Exploit for CVE-2025-60357
CVE-2025-60357- NoSQLMongoDB Injection Vulnerab...
WordPress Country Blocker for AdSense plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Country Blocker for AdSense versions = 1.0...
CVE-2023-49440
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...
WordPress Anber Elementor Addon plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Banner button link vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Anber Elementor Addon versions = 1.0.1...
WordPress Peer Publish plugin <= 1.0 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Peer Publish versions = 1.0...
Exploit for CVE-2023-49440
CVE-2023-49440-POC Exploit Title: AhnLab EPP Management...
WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Posts Navigation Links for Sections and Headings versions = 1.0.1...
CVE-2023-49440
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...
CVE-2023-49440
AhnLab EPP Management (v1.0.15 and prior) is affected by a Boolean-based SQL injection in the web admin interface via the preview parameter, enabling access to the backend DB and potential RCE. Public PoCs/exploits exist (e.g., via /api/console/ems/query/report/preview) and exploit code is availa...
