CVE-2025-4428

CVE-2025-4427 & CVE-2025-4428 Scanner de Vulnerabilidades Herramienta avanzada de detección para identificar sistemas vulnerables a la cadena de explotación CVE-2025-4427 y CVE-2025-4428. Este escáner de seguridad ayuda a identificar endpoints vulnerables y demuestra la explotación de prueba de...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

Cadena CVE-2025-4427 y CVE-2025-4428 Ivanti EPMM Herramienta generadora de artefactos de detección de 1 día para la cadena RCE Pre-Autenticación de Ivanti EPMM Detección en Acción root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ ...

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...

Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool

This script attempts to detect if Ivanti EPMM is vulnerable to CVE-2025-4427 and CVE-2025-4428. It affects versions 11.12.0.4 and prior, 12.3.0.1 and prior, 12.4.0.1 and prior, and 12.5.0.0 and prior...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM...

CVE-2025-4427

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16170 2025-05-13 16:31:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vi4o3jrz2 2025-05-13 16:47:59+00:00| seen|...

CVE-2025-4427

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API...

Security Advisory Ivanti Endpoint Manager Mobile (EPMM) May 2025 (CVE-2025-4427 and CVE-2025-4428)

Last Modified Date Aug 23, 2026 10:42:43 PM...

CVE-2025-4427

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API. Recent assessments: remmons-r7 at May 22, 2025 5:21am UTC reported: On May 13, 2025, Ivanti published an adviso...