CVE-2025-60357

CVE-2025-60357- Inyección NoSQLMongoDB Descripción de la vulnerabilidad y del producto AhnLab EPP Management es una plataforma avanzada de protección de endpoints de próxima generación reconocida mundialmente, que integra gestión de parches, detección avanzada de malware, EDR y capacidades XDR. S...

GwisinMsi

GwisinMsi Este repositorio contiene el PoC del payload MSI utilizado en la entrada de blog. El payload se basa en el análisis del payload MSI del ransomware Gwisin realizado por el equipo ASEC de AhnLab en su entrada de blog. Configuración de compilación de DLL Proyecto Propiedades del proyecto...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...

EUVD-2025-210479

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

PT-2026-60765

Name of the Vulnerable Software and Affected Versions AhnLab EPP Management version 1.0.14.32-6249 Description A NoSQL injection issue exists in the 'eventlog/agentEvent/list' endpoint. NoSQL injection is a type of attack where malicious queries are injected into a NoSQL database, potentially...

CVE-2025-60357: Improper Neutralization of Special Elements in Data Query Logic

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management (Centralised Endpoint Security Management) versions 1.0.14.32-6249 and earlier are vulnerable to a NoSQL injection (MongoDB) in the /api/console/ems/eventlog/agentEvent/list endpoint. The flaw allows attackers to craft malicious queries in the request body to extract sensiti...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

Exploit for CVE-2025-60357

CVE-2025-60357- NoSQLMongoDB Injection Vulnerab...

WordPress Country Blocker for AdSense plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Country Blocker for AdSense versions = 1.0...

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

WordPress Anber Elementor Addon plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Banner button link vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Anber Elementor Addon versions = 1.0.1...

WordPress Peer Publish plugin <= 1.0 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Peer Publish versions = 1.0...

Exploit for CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP Management...

WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Posts Navigation Links for Sections and Headings versions = 1.0.1...

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

CVE-2023-49440

AhnLab EPP Management (Centralised Endpoint Security Management) version 1.0.15 and prior is vulnerable to Boolean-based and time-based SQL Injection within the web admin interface. The flaw resides in the improper manipulation of the preview parameter (and the list parameter) within the JSON str...