482 matches found
Ivanti EPM XML External Entity
Ivanti Endpoint Manager EPM versions 2022 SU6 / 2024 SU1 are vulnerable to an XML External Entity allowing an unauthenticated attacker to read arbitrary files from the system via a specially crafted request. No source data...
Metasploit Weekly Wrap-Up 11/22/2024
JetBrains TeamCity Login Scanner Metasploit added a login scanner for the TeamCity application to enable users to check for weak credentials. TeamCity has been the subject of multiple ETR vulnerabilities and is a valuable target for attackers. Targeted DCSync added to Windows Secrets Dump This...
Ivanti EPM Agent Portal Command Execution Exploit
This Metasploit module leverages an unauthenticated remote command execution vulnerability in Ivanti's EPM Agent Portal where an RPC client can invoke a method which will run an attacker-specified string on the remote target as NT AUTHORITY\SYSTEM. This vulnerability is present in versions prior ...
Ivanti EPM Agent Portal Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/msnrtp/client' class MetasploitModule 'Ivanti EPM Agent Portal Command Execution', 'Description' = %q This module leverages an unauthenticated RCE in...
The vulnerability of the Ivanti EPM endpoint management software lies in its lack of measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary code.
The vulnerability of the Ivanti EPM endpoint management software exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the updateAssetInfo method in the Ivanti EPM endpoint management software allows a hacker to execute arbitrary code.
The vulnerability of the updateAssetInfo method in the Ivanti EPM endpoint management software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the ImportXml method in the Ivanti EPM endpoint management software allows a hacker to gain access to confidential information.
The vulnerability of the ImportXml method in the Ivanti EPM endpoint management software is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential information...
The vulnerability of the Ivanti EPM endpoint management software lies in the lack of protective measures for the SQL query structure, allowing a hacker to execute arbitrary code.
The vulnerability of the Ivanti EPM endpoint management software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially crafted SQL code remotely...
The vulnerability of the Ivanti EPM endpoint management software lies in the lack of protective measures for the SQL query structure, allowing a hacker to execute arbitrary code.
The vulnerability of the Ivanti EPM endpoint management software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially crafted SQL code remotely...
Ivanti EPM RecordGoodApp SQL Injection
Ivanti Endpoint Manager EPM versions 2022 SU5 and below suffer from a SQL Injection vulnerability. By exploiting this vulnerability, a remote and unauthenticated attacker can achieve Remote Code Execution RCE on the affected system. No source data...
The vulnerability of the Ivanti EPM endpoint management software is related to an uncontrolled element in the search process. This allows a malicious individual to elevate their privileges to SYSTEM level.
The vulnerability of the Ivanti EPM endpoint management software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to increase their privileges to SYSTEM level...
The vulnerability of the Ivanti EPM endpoint management software lies in the lack of protective measures for the SQL query structure, allowing a hacker to execute arbitrary code.
The vulnerability of the Ivanti EPM endpoint management software relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created query...
The vulnerability of the Ivanti EPM endpoint management software lies in the lack of authentication for a critical function, allowing a malicious actor to trigger a service failure.
The vulnerability of the Ivanti EPM endpoint management software lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow a remote attacker to cause service failures...
CVE-2024-32848
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34785
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34779
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34779
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-32848
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34785
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-37397
An External XML Entity XXE vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to leak API secrets...