139 matches found
CVE-2023-35078
CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC Usage python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...
CVE-2024-22026
CVE-2024-22026 PoC di sfruttamento per CVE-2024-22026 che interessa Ivanti EPMM "MobileIron Core" CVE-2024-22026 è una vulnerabilità di escalation dei privilegi locale nei server Ivanti EPMM precedentemente MobileIron precedenti alle versioni 12.1.0.0, 12.0.0.0 e 11.12.0.1. Questa vulnerabilità...
CVE-2023-35078-Exploit-POC
CVE-2023-35078 Exploit POC La vulnerabilità di accesso API remoto non autenticato CVE-2023-35078 è stata scoperta in Ivanti Endpoint Manager Mobile EPMM, precedentemente noto come MobileIron Core. Questa vulnerabilità interessa tutte le versioni supportate – versione 11.4, release 11.10, 11.9 e...
watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428
CVE-2025-4427 e CVE-2025-4428 Ivanti EPMM Chain Generatore di artefatti di rilevamento per la catena 1day di RCE Pre-Auth Ivanti EPMM Rilevamento in Azione $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ /...
CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE
Target fittizio per RCE pre-autenticazione Ivanti EPMM Una semplice applicazione demo che mostra come riprodurre la vulnerabilità RCE pre-autenticazione Ivanti EPMM CVE-2026-1281 / CVE-2026-1340 a scopo educativo e di ricerca sulla sicurezza. Panoramica della vulnerabilità Questa vulnerabilità...
CVE-2026-1281-Ivanti-EPMM-RCE
CVE-2026-1281 & CVE-2026-1340 - Ivanti EPMM Pre-Auth RCE ⚠️ DISCLAIMER: Questo PoC è fornito esclusivamente a scopo educativo e di ricerca sulla sicurezza. L'utilizzo senza autorizzazione esplicita è illegale. 🎯 Descrizione Proof of Concept PoC completo per lo sfruttamento delle vulnerabilità...
CVE-2023-35078
CVE-2023-35078 Questo script verifica eticamente la presenza di cve-2023-35078 richiedendo l'endpoint /ping dell'API Ivanti EPMM. /ping risponde semplicemente con la versione VSP, senza tentare di estrarre dati di dispositivi o amministratori. Utilizzo: ./CVE-2023-35078 Questo script presuppone...
CVE-2023-35078
CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: jq -cr 'select.http.favicon.hash ==...
Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
Ivanti Endpoint Manager Mobile EPMM versions 12.5.0.0 through 12.7.0.0 contain a code injection vulnerability that allows unauthenticated remote attackers to achieve arbitrary code execution on the target system. id: CVE-2026-1281 info: name: Ivanti EPMM =12.7.0.0 - Unauthenticated Code Injection...
The vulnerability of the endpoint management application for mobile devices and mobile applications, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), is related to lack of access control. This allows a malicious individual to increase their privileges.
The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to elevate their...
EUVD-2026-35444
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-10727
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-10727
Ivanti EPMM (Ivanti Endpoint Manager/Mobile EPMM) is affected by an OS command injection in versions before 12.9.0.1, 12.8.0.3, and 12.7.0.2. A remote authenticated attacker can execute arbitrary commands as root. The CVSS (3.1) vectors indicate network access, high impact on confidentiality, int...
CVE-2026-10727
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-10727
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
Ivanti EPMM 操作系统命令注入漏洞
Ivanti EPMM is a product developed by the American company Ivanti. It enables IT departments to create policies for mobile devices, applications, and content. Versions of Ivanti EPMM prior to 12.9.0.1, 12.8.0.3, and 12.7.0.2 contained a vulnerability related to operating system command injection...
CVE-2026-10727: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root...
CVE-2026-5787
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates...