753 matches found
Ivanti-Connect-Around-Scan
Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker Overview Features Types of Checks WEB ACCESS SYSTEM INFO BYPASS DETECTED Status Types Explanation Getting Started Requirements Usage Arguments Target Specification Custom Variables Output Stylization To Do...
CVE-2025-0282
CVE-2025-0282 Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282 Command: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Reference:...
CVE-2023-46805_CVE-2024-21887
CVE-2023-46805 An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks. usage: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh https://my.vpn.ip:443...
CVE-2019-11539
CVE-2019-11539 Original Discovery: Orange Tsai, Meh Chang Authors: Justin Wagner, Alyssa Herrera Thanks to: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Vulnerability Description In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and...
Blackash-CVE-2025-0282
Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...
Ivanti Connect Secure Command Injection (CVE-2024-21887)
Chains CVE-2023-46805 path traversal auth bypass with CVE-2024-21887 command injection via /api/v1/totp/user-backup-code/../../admin/config/set on Ivanti Connect Secure / Policy Secure gateways. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure auth bypass + command injection...
Exploit for Out-of-bounds Write in Ivanti Connect_Secure
CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Ga...
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
The shipped “secure” security policy includes a rule intended to prevent reading/writing from standard streams: xml However, ImageMagick also supports fd: pseudo-filenames e.g., fd:0, fd:1. This path form is not blocked by the secure policy templates, and therefore bypasses the protection goal of...
CVE-2026-25966 ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
ImageMagick is free and open-source software used for editing and manipulating digital images. The shipped "secure" security policy includes a rule intended to prevent reading/writing from standard streams. However, ImageMagick also supports fd: pseudo-filenames e.g., fd:0, fd:1. Prior to version...
CVE-2026-25966
CVE-2026-25966 concerns ImageMagick’s security policy bypass via fd: pseudo-filenames (e.g., fd:0, fd:1). Prior to 7.1.2-15 and 6.9.13-40, the policy did not block this path form, allowing potential local access to stdin/stdout. A patch was added to more secure policies by default in 7.1.2-15/6.9...
CVE-2022-35258
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior...
CVE-2022-35254
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior...
CVE-2019-11543
XSS exists in the admin web console in Pulse Secure Pulse Connect Secure PCS 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1...
CVE-2024-39710
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
EUVD-2017-9090
Malware in sbrugna...
EUVD-2024-42773
Malicious code in bioql PyPI...
EUVD-2024-50563
Malicious code in bioql PyPI...
EUVD-2024-19651
Malicious code in bioql PyPI...