Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

CVE-2024-34785

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-34783

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-34779

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

EUVD-2024-30632

Malicious code in bioql PyPI...

EUVD-2024-49005

Malicious code in bioql PyPI...

EUVD-2024-26820

Malicious code in bioql PyPI...

EUVD-2024-26838

Malicious code in bioql PyPI...

EUVD-2024-30628

Malicious code in bioql PyPI...

EUVD-2024-49088

Malicious code in bioql PyPI...

EUVD-2024-26824

Malicious code in bioql PyPI...

EUVD-2024-26817

Malicious code in bioql PyPI...

EUVD-2022-32269

Malicious code in bioql PyPI...

EUVD-2024-51397

Malicious code in bioql PyPI...

EUVD-2024-26823

Malicious code in bioql PyPI...

EUVD-2024-36633

Malicious code in bioql PyPI...

EUVD-2024-26822

Malicious code in bioql PyPI...

EUVD-2024-49178

Malicious code in bioql PyPI...

EUVD-2024-49089

Malicious code in bioql PyPI...

EUVD-2024-49090

Malicious code in bioql PyPI...