743 matches found
Blackash-CVE-2025-0282
Blackash-CVE-2025-0282 説明 Ivanti Connect Secure バージョン22.7R2.5未満、Ivanti Policy Secure バージョン22.7R1.2未満、およびIvanti Neurons for ZTAゲートウェイ バージョン22.7R2.3未満 におけるスタックベースのバッファオーバーフローにより、リモートの未認証攻撃者がリモートコード実行を達成できます。 メトリクス CNA: ivanti 基本スコア: 9.0 CRITICAL ⚫ ベクター: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H...
CVE-2023-46805_CVE-2024-21887
CVE-2023-46805 Ivanti ICS 9.x、22.x および Ivanti Policy Secure の Web コンポーネントにおける認証バイパスの脆弱性により、リモートの攻撃者が制御チェックをバイパスして制限されたリソースにアクセスできるようになります。 usage: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh https://my.vpn.ip:443 注意事項: chmod +x CVE-2023-46805.sh 必要なアプリ: curl + jsonpp 結果:...
CVE-2025-0282
CVE-2025-0282 Ivanti Connect Secure、Policy Secure & ZTA Gateways - CVE-2025-0282 コマンド: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET 参考:...
Ivanti-Connect-Around-Scan
Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker 概要 機能 チェックの種類 WEB ACCESS SYSTEM INFO BYPASS DETECTED ステータスタイプの説明 はじめに 必要条件 使用方法 引数 ターゲット指定 カスタム変数 出力のスタイリング To Do コントリビューションガイドライン 問題の報告 プルリクエストの提出 意図された用途と免責事項 目的 免責事項 ライセンス 謝辞 作者について 概要 Connect...
CVE-2019-11539
CVE-2019-11539 最初の発見者: Orange Tsai, Meh Chang 作成者: Justin Wagner, Alyssa Herrera 謝辞: Orange, Meh Chang, Rich Warren, Alyssa, Mimir 脆弱性の説明 Pulse Secure Pulse Connect Secure バージョン9.0RX（9.0R3.4未満）、8.3RX（8.3R7.1未満）、8.2RX（8.2R12.1未満）、8.1RX（8.1R15.1未満）、および Pulse Policy Secure...
Exploit for Out-of-bounds Write in Ivanti Connect_Secure
CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Ga...
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
The shipped “secure” security policy includes a rule intended to prevent reading/writing from standard streams: xml However, ImageMagick also supports fd: pseudo-filenames e.g., fd:0, fd:1. This path form is not blocked by the secure policy templates, and therefore bypasses the protection goal of...
CVE-2026-25966
CVE-2026-25966 concerns ImageMagick’s security policy bypass via fd: pseudo-filenames (e.g., fd:0, fd:1). Prior to 7.1.2-15 and 6.9.13-40, the policy did not block this path form, allowing potential local access to stdin/stdout. A patch was added to more secure policies by default in 7.1.2-15/6.9...
CVE-2026-25966 ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
ImageMagick is free and open-source software used for editing and manipulating digital images. The shipped "secure" security policy includes a rule intended to prevent reading/writing from standard streams. However, ImageMagick also supports fd: pseudo-filenames e.g., fd:0, fd:1. Prior to version...
CVE-2022-35258
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior...
CVE-2022-35254
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior...
CVE-2019-11543
XSS exists in the admin web console in Pulse Secure Pulse Connect Secure PCS 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1...
CVE-2024-39710
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
EUVD-2017-9090
Malware in sbrugna...
EUVD-2024-26222
Malicious code in bioql PyPI...
EUVD-2024-42773
Malicious code in bioql PyPI...
EUVD-2024-38337
Malicious code in bioql PyPI...
EUVD-2022-38145
Malicious code in bioql PyPI...