9 matches found
CVE-2024-29824
horizon3ai의 스크립트를 일부 최적화했습니다 사실 정확성을 보장하기 위해 검증 메커니즘을 추가한 것뿐입니다 원본 프로젝트 주소: https://github.com/horizon3ai/CVE-2024-29824 "-f / --file" 및 ThreadPool 추가...
Metasploit Weekly Wrap-Up 07/12/2024
The Usual Suspects This release features two new exploits targeting old friends: Confluence and Ivanti. CVE-2024-21683 is a very easy vulnerability to exploit, but as pointed out in the AttackerKB Review, it requires authentication as a ‘Confluence Administrator.’ On the other hand, CVE-2024-2982...
Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution Exploit
Ivanti Endpoint Manager EPM 2022 SU5 and prior versions are susceptible to an unauthenticated SQL injection vulnerability which can be leveraged to achieve unauthenticated remote code execution. This module requires Metasploit: https://metasploit.com/download Current source:...
Exploit for SQL Injection in Ivanti Endpoint_Manager
CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution...
CVE-2024-29824
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...
CVE-2024-29824
CVE-2024-29824 affects Ivanti Endpoint Manager (EPM) Core server. A SQL injection in the RecordGoodApp flow (via un-sanitized md5 in ReportedGoodApps handling) allows an unauthenticated attacker on the same network to execute arbitrary code, enabling unauthenticated remote code execution. Vulnera...
CVE-2024-29824
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...
CVE-2024-29824
creationtimestamp| type| source ---|---|--- 2024-05-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1300 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463 2024-06-12 19:38:19+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8813 2024-06-13...
