424 matches found
Ivanti-EPM-Coercion-Vulnerabilities
ثغرات الإكراه في Ivanti EPM استغلالات إثبات المفهوم لثغرة Ivanti EPM CVE-2024-13159 وغيرها التي تسمح بإكراه غير مصادق عليه لبيانات اعتماد جهاز Ivanti EPM لاستخدامها في هجمات الترحيل. منشور المدونة تحليل متعمق هنا:...
CVE-2023-28324
CVE-2023-28324 CVE-2023-28324 के लिए POC जो Ivanti EPM को प्रभावित करता है। तकनीकी विश्लेषण भेद्यता का तकनीकी मूल कारण विश्लेषण हमारे ब्लॉग पर पाया जा सकता है: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ सारांश यह POC AgentPortal.exe में एक भेद्यता का दुरुपयोग...
CVE-2021-44529
CVE-2021-44529 ثغرة حقن كود في جهاز Ivanti EPM Cloud Services Appliance CSA CVE-2021-44529 تسمح لمستخدم غير مصادق بتنفيذ كود عشوائي بصلاحيات محدودة nobody...
CVE-2024-29824
CVE-2024-29824: Ivanti EPM SQL इंजेक्शन रिमोट कोड निष्पादन भेद्यता असुरक्षित Ivanti EPM उपकरणों पर ब्लाइंडली कमांड निष्पादित करने के लिए प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट। ब्लॉग पोस्ट डीप डाइव और समझौता के संकेतक यहाँ:...
cve-2024-50330-ivanti_epm_sqli_reproduction
CVE-2024-50330: حقن SQL في Ivanti Endpoint Manager EPM يؤدي إلى تنفيذ تعليمات برمجية عن بُعد RCE نظرة عامة CVE-2024-50330 هي ثغرة حرجة من نوع حقن SQL قبل المصادقة في Ivanti Endpoint Manager EPM تسمح لمهاجم عن بُعد غير مصرح له بتحقيق تنفيذ تعليمات برمجية عن بُعد على الخادم المستهدف. تم الكشف عن...
Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive
A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...
Security Advisory Ivanti Endpoint Manager (EPM) August 2026
Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...
CVE-2024-34785
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34783
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34779
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
EUVD-2024-36623
Malicious code in bioql PyPI...
EUVD-2024-26820
Malicious code in bioql PyPI...
EUVD-2024-26823
Malicious code in bioql PyPI...
EUVD-2024-26838
Malicious code in bioql PyPI...
EUVD-2024-26817
Malicious code in bioql PyPI...
EUVD-2024-26819
Malicious code in bioql PyPI...
EUVD-2022-32269
Malicious code in bioql PyPI...
EUVD-2024-19656
Malicious code in bioql PyPI...