Lucene search
+L

4476 matches found

Kitploit
Kitploit
added 2026/09/02 4:27 a.m.6 views

itsm-exploit

Exploits for Ivanti Neurons for ITSM On Premise This script exploits several flaws that allow an unauthenticated attacker to gain administrator access and execute remote commands CVE-2023-46808 on Ivanti Neurons for ITSM On Premise. For technical details, see Technical Details Affected versions...

9.9CVSS7.5AI score0.02001EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 4:02 a.m.10 views

CVE-2023-38041-POC

CVE-2023-38041-POC Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept...

7.8CVSS7.1AI score0.00672EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 4:02 a.m.3 views

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Ivanti Sentry RCE Detection Tool A comprehensive proof-of-concept detection tool for testing Ivanti Sentry vulnerabilities related to authentication bypass and remote code execution. This tool identifies systems vulnerable to CVE-2026-10520 and CVE-2026-10523. Overview This proje...

10CVSS8AI score0.99915EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/02 3:48 a.m.7 views

CVE-2023-46805

CVE-2023-46805 Scanner CVE-2023-46805 Scanner for possible vulnerable Ivanti Connect Secure appliances by country using Shodan. Script version: 1.3 Updated with the recent blog post made by Assetnote ⚠️ This script is for defensive purposes and should be used by cybersecurity professionals to...

9.1CVSS7.7AI score0.99999EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/02 2:06 a.m.5 views

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool Detection in Action root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ /...

8.8CVSS6.9AI score0.99927EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 1:49 a.m.5 views

CVE-2023-46805

Title: Proof of Concept for CVE-2023-46805 - For Educational Use Only License: This work is placed under the Creative Commons Attribution 4.0 International License CC BY 4.0. You are free to share, copy, distribute, and transmit this work, to adapt it or use it for other purposes, provided the...

8.2CVSS7.3AI score0.99986EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/02 1:30 a.m.6 views

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron Core. This vulnerability impacts all supported versions – Version 11.4 releases 11.10, 11.9 and 11.8. Older...

10CVSS7.4AI score0.99999EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/02 12:50 a.m.5 views

Ivanti-Connect-Secure-Logs-Parser

Ivanti Secure Connect Logs Parser This repository provides a Python script designed to convert Ivanti Secure Connect .vc0 log files into CSV format for digital forensics and incident response. In particular, the parser: Extracts timestamps from Ivanti log files notably from .vc0 files. Converts...

9CVSS6.9AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/02 12:47 a.m.7 views

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN Privilege Escalation Ivanti Secure Access previously Pulse Secure privilege escalation Cobalt Strike BOF CVE-2023-35080. Exploit by Alex and BOF by Tijme. Made possible by Northwave Cyber Security Description This is a Cobalt Strike CS Beacon Object File BOF and executab...

8.8CVSS7AI score0.00713EPSS
SaveExploits1References6
Kitploit
Kitploit
added 2026/09/02 12:11 a.m.6 views

CVE-2023-35078

CVE-2023-35078 This script ethically checks for the presence of cve-2023-35078 via requesting the /ping endpoint from the Ivanti EPMM API. /ping simply responds with the VSP version, rather than attemping to pull device or admin data. Usage: ./CVE-2023-35078 This script assumes https connections...

10CVSS7.4AI score0.99999EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/01 10:42 p.m.6 views

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

9.8CVSS7.6AI score0.9998EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/01 10:08 p.m.4 views

CVE-2023-38035

CVE-2023-38035 POC for CVE-2023-38035 affecting Ivanti Sentry Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive Summary This POC abuses an unauthenticated command...

9.8CVSS7.7AI score0.99954EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/01 9:51 p.m.5 views

pulse-meter

Pulse Meter This is a work in progress for parsing the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282. Caveat : False positives are possible so it's best to check manually to verify any results. Note...

9.1CVSS7.4AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/01 9:47 p.m.5 views

ivanti-automationmanager-exploit

PoC for CVE-2022-44569 for Ivanti Automation Manager, it took Ivanti more than a year to get a fix out. Ivanti told me it's fixed in Ivanti Automation 2023.4... https://github.com/rweijnen/ivanti-automationmanager-exploit/assets/7575747/818f11e1-0e86-4d91-8ce1-8949e45cfd8c...

8.8CVSS7.2AI score0.00761EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/01 9:27 p.m.4 views

CVE-2023-32560

CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC Reference: https://www.tenable.com/security/research/tra-2023-27...

9.8CVSS7.4AI score0.99428EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/01 8:41 p.m.3 views

ivanti_shell

CVE-2024-21887 Exploitation with Ngrok Reverse Shell This repository provides a Python script designed to demonstrate the exploitation of the CVE-2024-21887 vulnerability in Ivanti Connect Secure gateways. It utilizes Ngrok to establish a reverse shell for educational and ethical testing purposes...

9.1CVSS7.4AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/01 8:38 p.m.4 views

Ivanti-CVE-2025-0282

Ivanti-CVE-2025-0282 Ivanti Remote code execution Thanks @Abdualhadi khalifa...

9CVSS6.9AI score0.99979EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/01 7:04 p.m.5 views

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805CVE-2024-21887 The script in this repository checks and exploits CVE-2023-46805 Auth Bypass and CVE-2024-21887 Remote Code Execution vulnerabilities specified in the Ivanti Connect Secure product exist. You can check vulnerability details this link...

9.1CVSS7.4AI score0.99999EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.2 views

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

9CVSS7.2AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.4 views

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...

9CVSS7.4AI score0.99979EPSS
SaveExploits14
Rows per page
Query Builder