CVE-2024-8190-unauth

CVE-2024-8190 未认证 描述 结合 CVE-2024-8963 和 CVE-2024-8190——针对 Ivanti CSA 4.6 及以下版本的未认证远程代码执行 PoC。 CVE-2024-8963 Ivanti CSA 4.6 Patch 519 之前版本中的路径遍历漏洞，允许远程未认证攻击者访问受限功能。 CVE-2024-8190 Ivanti Cloud Services Appliance 4.6 Patch 518 及之前版本中的 OS 命令注入漏洞，允许远程认证攻击者获得远程代码执行能力。攻击者必须拥有管理员权限才能利用此漏洞。 本 PoC...

CVE-2024-8963

CVE-2024-8963 Ivanti Cloud Services Appliance - 路径遍历 Ivanti CSA 4.6 Patch 519 之前版本中存在路径遍历漏洞，允许远程未认证攻击者访问受限功能。...

CVE-2024-8190

CVE-2024-8190：Ivanti Cloud Service Appliance 认证命令注入 针对易受攻击设备利用 CVE-2024-8190 的概念验证。 博客文章 根本原因及入侵指标（IoC）请参见： https://www.horizon3.ai/attack-research/cisa-kev-cve-2024-8190-ivanti-csa-command-injection/ 使用方法 root@kitploit: % python3 CVE-2024-8190.py -h usage: CVE-2024-8190.py -h -u URL --username...

EUVD-2024-49899

Malicious code in bioql PyPI...

EUVD-2024-34196

Malicious code in bioql PyPI...

EUVD-2025-4984

Malicious code in bioql PyPI...

Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms

The French cybersecurity agency on Tuesday revealed that a number of entities spanning governmental, telecommunications, media, finance, and transport sectors in the country were impacted by a malicious campaign undertaken by a Chinese hacking group by weaponizing several zero-day vulnerabilities...

CVE-2024-9379

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

Ivanti CSA OS Command Injection Vulnerability

Ivanti CSA is a locally deployed virtual appliance designed to simplify and enhance the integration of Ivanti products with cloud services. The Ivanti CSA suffers from an OS command injection vulnerability that stems from the application failing to properly filter constructed command special...

Ivanti CSA Path Traversal Vulnerability

Ivanti CSA is a locally deployed virtual appliance designed to simplify and enhance the integration of Ivanti products with cloud services. The Ivanti CSA suffers from a path traversal vulnerability that arises when the program fails to properly filter special elements in the path of a resource o...

CVE-2024-11771

Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-11771

Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...

CVE-2024-11771

Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...

CVE-2024-11771

Ivanti CSA (Cloud Services Appliance) is affected by CVE-2024-11771: a path traversal vulnerability in versions before 5.0.5 allows a remote unauthenticated attacker to access restricted functionality. The CVSS v3.1 base score is 5.3 (Medium); attack vector NETWORK, no privileges required, no use...

CVE-2024-11771

Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...

CVE-2024-11771

Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...