424 matches found
Ivanti-EPM-Coercion-Vulnerabilities
Vulnérabilités de coercition Ivanti EPM Preuves de concept pour Ivanti EPM CVE-2024-13159 et autres, permettant la coercition non authentifiée des identifiants de la machine Ivanti EPM pour une utilisation dans des attaques par relais. Article de blog Analyse approfondie ici :...
CVE-2023-28324
CVE-2023-28324 POC pour CVE-2023-28324 affectant Ivanti EPM. Analyse technique Une analyse technique de la cause racine de la vulnérabilité peut être trouvée sur notre blog : https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Résumé Ce POC exploite une vulnérabilité da...
CVE-2021-44529
CVE-2021-44529 Уязвимость внедрения кода в CVE-2021-44529 Ivanti EPM Cloud Services Appliance CSA позволяет неаутентифицированному пользователю выполнять произвольный код с ограниченными привилегиями nobody...
CVE-2024-29824
CVE-2024-29824: Vulnérabilité d'injection SQL et d'exécution de code à distance dans Ivanti EPM Exploit de preuve de concept pour exécuter aveuglément des commandes sur des appliances Ivanti EPM vulnérables. Article de blog Analyse approfondie et indicateurs de compromission ici :...
cve-2024-50330-ivanti_epm_sqli_reproduction
CVE-2024-50330: Ivanti Endpoint Manager EPM SQL-инъекция до RCE Обзор CVE-2024-50330 — это критическая уязвимость SQL-инъекции без аутентификации в Ivanti Endpoint Manager EPM, которая позволяет удаленному неаутентифицированному злоумышленнику выполнить произвольный код на целевом сервере...
Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive
A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...
Security Advisory Ivanti Endpoint Manager (EPM) August 2026
Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...
CVE-2024-34785
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34783
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34779
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
EUVD-2024-36623
Malicious code in bioql PyPI...
EUVD-2024-26820
Malicious code in bioql PyPI...
EUVD-2024-26823
Malicious code in bioql PyPI...
EUVD-2024-26838
Malicious code in bioql PyPI...
EUVD-2024-26817
Malicious code in bioql PyPI...
EUVD-2024-26819
Malicious code in bioql PyPI...
EUVD-2022-32269
Malicious code in bioql PyPI...
EUVD-2024-19656
Malicious code in bioql PyPI...