825 matches found
WindowsMDM-LPE-0Day
WindowsMDM-LPE-0Day Works best on Windows 11 CVE-2021-24084 Windows Local Privilege Escalation Left officially unpatched since 2020. Hence, its still a zero day Screenshots: Youtube : https://youtu.be/lhT9m68GgL4 Affected Windows Versions Windows 10 1803 Windows 10 1809 Windows 10 1909 Windows 10...
aftermath
About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...
CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP
CVE-2026-22011 – iOS MDM Profile Delivery over HTTP Program Code Python Flask MDM server mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile delivered without HTTPS...
santa
Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...
CVE-2013-1081
This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...
OutOfTune
OutOfTune Inspired by the original Pytune, OutOfTune registers a rogue device in Entra ID, enrolls it into Intune MDM, and checks the resulting compliance state. Only supports Windows devices as this was my main goal, might add additional ones in the future. Accompanying blog:...
Analysis of Whether Apache Tomcat Vulnerabilities Affect Ivanti EPMM, Sentry Connector, and N-MDM
Ivanti has completed its initial investigation into the impact of CVE-2026-101356, CVE-2026-101296, CVE-2026-93446, CVE-2026-74048, CVE-2026-80353, CVE-2026-88041 and CVE-2026-74049 , which all affect Apache Tomcat. EPMM, Sentry, Connector, and N-MDM do use Apache Tomcat, we have however confirme...
CVE-2026-96184
Heap-based buffer overflow in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-113820
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-112987
Integer overflow or wraparound in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-119945
A use after free vulnerability exists in Windows Modern Device Management (MDM) , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-822 (Untrusted Pointer Dereference). While the technical root cause i...
EUVD-2026-122440
Use after free in Windows Modern Device Management MDM allows an unauthorized attacker to execute code over a network...
CVE-2026-102219
CVE-2026-102219 describes a vulnerability in Windows Modern Device Management (MDM) caused by inadequate encryption strength . This flaw allows an unauthorized attacker to execute code over a network . While the provided documents confirm the existence and impact of this vulnerability, specific r...
CVE-2026-113820
A Use after free vulnerability exists in Windows Modern Device Management (MDM) , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is addressed in the November 10, 2026 , security updates. Remediation is available via Hotpatch KB5132043 for Window...
EUVD-2026-121945
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
EUVD-2026-121910
Integer overflow or wraparound in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-112987
A vulnerability in Windows Modern Device Management (MDM) involves an integer overflow or wraparound that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-190 and CWE-122 . No specific exploit details or direct links are provided in the...
EUVD-2026-121501
Heap-based buffer overflow in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-96184
A heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to achieve local privilege escalation . The provided documents do not specify the exact component or root cause beyond the general service name. No specific exploit details or in-the-wild exploita...
