CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

424 matches found

Kitploit•added 2026/10/09 7:14 a.m.•8 views

Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM 자격 증명 강제 취약점 Ivanti EPM CVE-2024-13159 및 기타 취약점에 대한 개념 증명PoC 익스플로잇으로, 릴레이 공격에 사용할 수 있도록 Ivanti EPM 머신 자격 증명을 인증 없이 강제로 획득할 수 있게 해줍니다. 블로그 게시물 심층 분석은 여기에서 확인하세요: https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/ 사용...

9.8CVSS8.8AI score0.99992EPSS

SaveExploits1

Kitploit•added 2026/10/08 8:41 p.m.•15 views

CVE-2023-28324

CVE-2023-28324 POC для CVE-2023-28324, затрагивающего Ivanti EPM. Технический анализ Технический анализ первопричины уязвимости можно найти в нашем блоге: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Краткое описание Этот POC эксплуатирует уязвимость в...

9.8CVSS8.5AI score0.12904EPSS

SaveExploits5

Kitploit•added 2026/10/08 6:29 p.m.•17 views

CVE-2021-44529

CVE-2021-44529 CVE-2021-44529 Ivanti EPM 클라우드 서비스 어플라이언스CSA의 코드 주입 취약점으로, 인증되지 않은 사용자가 제한된 권한nobody으로 임의 코드를 실행할 수 있습니다...

9.8CVSS8.4AI score0.99105EPSS

SaveExploits9

Kitploit•added 2026/10/08 5:54 p.m.•17 views

CVE-2024-29824

CVE-2024-29824: Ivanti EPM SQL Injection 원격 코드 실행 취약점 취약한 Ivanti EPM 장비에서 명령을 블라인드 방식으로 실행하기 위한 개념 증명 익스플로잇입니다. 블로그 게시물 심층 분석 및 침해 지표는 다음에서 확인할 수 있습니다: https://www.horizon3.ai/attack-research/attack-blogs/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability 사용법 %...

9.6CVSS8.9AI score0.99938EPSS

SaveExploits5

Kitploit•added 2026/10/03 11:38 p.m.•14 views

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL 인젝션을 통한 RCE 개요 CVE-2024-50330은 Ivanti Endpoint Manager EPM의 치명적인 인증 전 SQL 인젝션 취약점으로, 원격의 인증되지 않은 공격자가 대상 서버에서 원격 코드 실행을 달성할 수 있게 합니다. 이 취약점은 2024년 11월 보안 업데이트에서 공개 및 패치되었습니다. 기술적 세부 사항 CVE : CVE-2024-50330 CWE : CWE-89 SQL 인젝션 CVSS : 치명적 CVSS 3.x 점수...

9.8CVSS7.6AI score0.40287EPSS

SaveExploits1

Nuclei•added 2026/09/26 2:05 a.m.•130 views

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

9.8CVSS8.3AI score0.99992EPSS

SaveExploits1References2

Ivanti•added 2026/08/11 1:58 p.m.•38 views

Security Advisory Ivanti Endpoint Manager (EPM) August 2026

Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...

8.1CVSS6.1AI score0.01595EPSS

SaveExploits0

RedhatCVE•added 2026/01/09 8:35 a.m.•21 views

CVE-2024-34785

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.25389EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•23 views

CVE-2024-34783

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.43356EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•17 views

CVE-2024-34779

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.24005EPSS

SaveExploits0References1