194 matches found
CVE-2024-22026
CVE-2024-22026 POC de exploit para CVE-2024-22026 que afecta a Ivanti EPMM "MobileIron Core" CVE-2024-22026 es una vulnerabilidad de escalada de privilegios local en las versiones del servidor Ivanti EPMM anteriormente MobileIron anteriores a 12.1.0.0, 12.0.0.0 y 11.12.0.1. Esta vulnerabilidad...
Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
Ivanti Endpoint Manager Mobile EPMM versions 12.5.0.0 through 12.7.0.0 contain a code injection vulnerability that allows unauthenticated remote attackers to achieve arbitrary code execution on the target system. id: CVE-2026-1281 info: name: Ivanti EPMM =12.7.0.0 - Unauthenticated Code Injection...
CVE-2026-1281-Ivanti-EPMM-RCE
CVE-2026-1281 & CVE-2026-1340 - Ivanti EPMM Pre-Auth RCE ⚠️ DISCLAIMER: This PoC is provided solely for educational and security research purposes. Unauthorized use is illegal. 🎯 Description Complete Proof of Concept PoC for exploiting the CVE-2026-1281 and CVE-2026-1340 vulnerabilities affecting...
CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE
Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...
CVE-2023-35078
CVE-2023-35078 このスクリプトは、Ivanti EPMM APIの/pingエンドポイントにリクエストを送信することで、cve-2023-35078の存在を倫理的にチェックします。 /pingは、デバイスや管理者データを取得しようとするのではなく、単にVSPバージョンを返します。 使用方法: ./CVE-2023-35078 このスクリプトは、デフォルトポートでのHTTPS接続を前提としています。 セットアップ 仮想環境のセットアップ: python3 -m venv env 環境の有効化: source env/bin/activate 依存関係のインストール: pip3...
CVE-2023-35078
CVE-2023-35078 shodan dorks 公開ターゲットを見つけるには、以下の shodan dorks を使用できます。 http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs 以下のコマンドを使用して、shodan API からデータをチェックスクリプトに適した形式に変換できます。 root@kitploit: jq -cr 'select.http.favicon.hash == 362091310 | if .ssl? then "https://" else "http://" end ...
CVE-2025-4427-CVE-2025-4428
CVE-2025-4428 y CVE-2025-4427 CVE-2025-4428 es una vulnerabilidad de ejecución remota de código posterior a la autenticación en el validador DeviceFeatureUsageReportQueryRequestValidator de EPMM. Surge del manejo inseguro de la entrada proporcionada por el usuario dentro de los mensajes de error...
CVE-2023-35078
CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC Uso python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...
CVE-2023-35078-Exploit-POC
PoC del exploit CVE-2023-35078 La vulnerabilidad de acceso remoto no autenticado a la API CVE-2023-35078 ha sido descubierta en Ivanti Endpoint Manager Mobile EPMM, anteriormente conocido como MobileIron Core. Esta vulnerabilidad afecta a todas las versiones compatibles: versión 11.4, lanzamiento...
watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428
Cadena CVE-2025-4427 y CVE-2025-4428 Ivanti EPMM Herramienta generadora de artefactos de detección de 1 día para la cadena RCE Pre-Autenticación de Ivanti EPMM Detección en Acción root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ ...
MobileIron Core - Remote Unauthenticated API Access
Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, Since CVE-2023-35082 arises from the same place as CVE-2023-35078, specifically the permissive nature of certain entries in the mifs web application’s security filter chain. id: CVE-2023-35082 info: name: MobileIron Core - Remote...
EUVD-2026-35444
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-10727
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-10727
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-10727
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-10727
Ivanti EPMM (Ivanti Endpoint Manager/Mobile EPMM) is affected by an OS command injection in versions before 12.9.0.1, 12.8.0.3, and 12.7.0.2. A remote authenticated attacker can execute arbitrary commands as root. The CVSS (3.1) vectors indicate network access, high impact on confidentiality, int...
Ivanti EPMM 操作系统命令注入漏洞
Ivanti EPMM is a product developed by the American company Ivanti. It enables IT departments to create policies for mobile devices, applications, and content. Versions of Ivanti EPMM prior to 12.9.0.1, 12.8.0.3, and 12.7.0.2 contained a vulnerability related to operating system command injection...
CVE-2026-5787
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates...