91 matches found
CVE-2024-8190
CVE-2024-8190: Inyección de Comandos Autenticada en Ivanti Cloud Service Appliance Prueba de concepto para explotar CVE-2024-8190 en dispositivos vulnerables. Publicación del Blog Causa raíz e indicadores de compromiso aquí:...
CVE-2024-8190-unauth
CVE-2024-8190 no autenticado Descripción Combinando CVE-2024-8963 & CVE-2024-8190 - PoC para RCE no autenticado en Ivanti CSA 4.6 y anteriores. CVE-2024-8963 Path Traversal en Ivanti CSA anterior al parche 519 de la versión 4.6 permite a un atacante remoto no autenticado acceder a funcionalidades...
CVE-2024-8963
CVE-2024-8963 Ivanti Cloud Services Appliance - Path Traversal Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality...
EUVD-2024-49899
Malicious code in bioql PyPI...
EUVD-2024-34196
Malicious code in bioql PyPI...
EUVD-2025-4984
Malicious code in bioql PyPI...
Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms
The French cybersecurity agency on Tuesday revealed that a number of entities spanning governmental, telecommunications, media, finance, and transport sectors in the country were impacted by a malicious campaign undertaken by a Chinese hacking group by weaponizing several zero-day vulnerabilities...
CVE-2024-9379
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...
Ivanti CSA OS Command Injection Vulnerability
Ivanti CSA is a locally deployed virtual appliance designed to simplify and enhance the integration of Ivanti products with cloud services. The Ivanti CSA suffers from an OS command injection vulnerability that stems from the application failing to properly filter constructed command special...
Ivanti CSA Path Traversal Vulnerability
Ivanti CSA is a locally deployed virtual appliance designed to simplify and enhance the integration of Ivanti products with cloud services. The Ivanti CSA suffers from a path traversal vulnerability that arises when the program fails to properly filter special elements in the path of a resource o...
CVE-2024-11771
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-11771
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...
CVE-2024-11771
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...
CVE-2024-11771
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality...
CVE-2024-11771
Ivanti CSA (Cloud Services Appliance) is affected by CVE-2024-11771: a path traversal vulnerability in versions before 5.0.5 allows a remote unauthenticated attacker to access restricted functionality. The CVSS v3.1 base score is 5.3 (Medium); attack vector NETWORK, no privileges required, no use...
