CVE-2022-3091: Exposure of Sensitive Information to an Unauthorized Actor

RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials. In some circumstances, an attacker can exploit this vulnerability to execute operating system OS commands...

CVE-2022-2893: Improper Limitation of a Pathname to a Restricted Directory

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files...

RONDS EPM 信息泄露漏洞

RONDS EPM is an application from RONDS, Inc. An information disclosure vulnerability exists in RONDS EPM version 1.19.5. An attacker could exploit this vulnerability to execute operating system OS commands...

PT-2023-13024

Name of the Vulnerable Software and Affected Versions RONDS EPM version 1.19.5 Description The issue allows unauthenticated users to leak credentials due to a vulnerable function. In certain circumstances, an attacker can exploit this to execute operating system OS commands. Recommendations For...

RONDS Equipment Predictive Maintenance Solution

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: RONDS Equipment: Equipment Predictive Maintenance EPM Vulnerabilities: Exposure of Sensitive Information to an Unauthorized Actor, Path Traversal 2. RISK EVALUATION Successful exploitation of these...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

Privilege escalation

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

CVE-2022-27773

CVE-2022-27773 is a privilege escalation vulnerability affecting Ivanti EPM (LANDesk Management Suite) where a user can execute commands with elevated privileges. The advisory notes impact on Ivanti Endpoint Manager Client prior to certain updates, allowing command execution on the system. The Re...

CVE-2022-27773: Incorrect Default Permissions

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

Ivanti EPM Cloud Services Appliance Code Injection (CVE-2021-44529)

A code injection vulnerability exists in Ivanti Endpoint Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Malicious code in epm-rdpt-angularjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66c99138b0f3509c031a0927e6a717e0049575a7f485deb0e5244b293db87b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2774 Malicious code in epm-rdpt-angularjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66c99138b0f3509c031a0927e6a717e0049575a7f485deb0e5244b293db87b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

U.S. Dept Of Defense: [███████] Remote Code Execution at ██████ [CVE-2021-44529] [HtUS]

IP Address used to find vulnerability: ██████ Vulnerable Website URL or Application: https://████ pomcldsvr2.████ Proof of ownership: ███ Summary: The server at https://███ is running a vulnerable version of CSA. A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows...

Malicious Package

Overview epm-rdpt-angularjs is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Directory traversal

CyberArk Endpoint Privilege Manager EPM through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory...

CVE-2021-44049

CyberArk Endpoint Privilege Manager (EPM) vulnerable through version 11.5.3.328 (before 2021-12-20). A local user can escalate privileges by abusing a Trojan horse Procmon64.exe placed in the user’s Temp directory. Affected component: EPM product executable/process handling in local user context;...

PT-2022-11975

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager EPM versions prior to 11.5.3.328 Description The issue allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory. Recommendations For versions prior to...

CVE-2021-44049: Exposure of Resource to Wrong Sphere

CyberArk Endpoint Privilege Manager EPM through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory...