Lucene search
+L

962 matches found

Kitploit
Kitploit
added 2026/09/12 3:52 a.m.6 views

policy_sentry

Policy Sentry IAM Least Privilege Policy Generator...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 7:43 p.m.78 views

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:46 p.m.7 views

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Ivanti Sentry RCE 检测工具 一个全面的概念验证检测工具,用于测试 Ivanti Sentry 中与身份验证绕过和远程代码执行相关的漏洞。该工具可识别存在 CVE-2026-10520 和 CVE-2026-10523 漏洞的系统。 概述 本项目旨在检测并验证 Ivanti Sentry 实例是否存在严重的身份验证绕过和远程代码执行缺陷。该工具通过 Ivanti Sentry API 端点发送特制消息,以执行系统命令并提取结果,帮助安全研究人员和渗透测试人员识别存在漏洞的部署。 漏洞详情 CVE-2026-10520 Ivanti...

10CVSS8.3AI score0.99915EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/11 2:51 p.m.8 views

CVE-2023-38035

CVE-2023-38035 POC de CVE-2023-38035 que afecta a Ivanti Sentry Análisis técnico Se puede encontrar un análisis técnico de la causa raíz de la vulnerabilidad en nuestro blog: https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive Resumen Este POC aprovecha una...

9.8CVSS8.9AI score0.99954EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/10 3:42 a.m.5 views

CVE-2026-10520

CVE-2026-10520 Ivanti Sentry(旧MobileIron Sentry)は、モバイルデバイスと企業バックエンドリソース(メール、SharePoint、内部Webアプリケーション)間のトラフィックをプロキシするエンタープライズセキュリティゲートウェイです。 Mobile Device Management (MDM)ポリシーを適用し、暗号化されたモバイルセッションを終了し、エンタープライズアプリの展開のために証明書ベースの認証を発行します。Sentryインスタンスは通常、インターネットに公開されたポート8443 上で動作し、MICS(Mobile Iron...

10CVSS8.3AI score0.99915EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 10:43 a.m.5 views

sentryexploit

MobileIron Sentry CVE-2023-38035 信息提取 功能 提取公司名称和联系邮箱 漏洞验证 使用方法 root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Company: XXXX Ltd., contact: [email protected] 参考来源 Horizon3 深入分析...

9.8CVSS8.5AI score0.99954EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/08 8:09 p.m.4 views

CVE-2026-5027-Langflow

CVE-2026-5027 和 CVE-2026-10520 CVE-2026-25089 利用工具: 克隆 root@kitploit: git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow 使用 exploit.py 文件 自动测试和利用。 root@kitploit: python3 exploit.py -u https://target.com CLI 自定义设置 当 webshell 位于文件夹内时使用自己的 webshell:...

10CVSS8.5AI score0.99915EPSS
SaveExploits14
NVD
NVD
added 2026/09/08 3:18 p.m.13 views

CVE-2026-83527

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

8.1CVSS0.01453EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 2:36 p.m.25 views

CVE-2026-83527

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

8.1CVSS0.01453EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 2:36 p.m.6 views

EUVD-2026-72812

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

8.1CVSS0.01453EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 2:36 p.m.45 views

CVE-2026-83527

CVE-2026-83527 is an Authentication Bypass vulnerability in Ivanti Sentry affecting versions before R10.8.2 , R10.7.3 , and R10.6.4 . A remote unauthenticated attacker can exploit it to gain administrative-level access , resulting in high impact to confidentiality, integrity, and availability (CV...

8.1CVSS0.01453EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 7:48 a.m.8 views

CVE-2026-10520

🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...

10CVSS8.4AI score0.99915EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/08 3:38 a.m.8 views

RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520 和 CVE-2026-10523 一个 Ivanti Sentry 身份验证绕过与远程代码执行检测工件生成器。 技术细节请参阅我们的博客文章。 检测演示 root@kitploit: $ python3 CVE-2026-10523.py --url https://127.0.0.1 --cmd "uname -a" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

10CVSS8.5AI score0.99915EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/08 1:38 a.m.6 views

watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520 y CVE-2026-10523 Un generador de artefactos de detección de omisión de autenticación y ejecución remota de código en Ivanti Sentry. Consulta nuestra entrada de blog para ver los detalles técnicos. Detección en acción root@kitploit: $ python3...

10CVSS8.5AI score0.99915EPSS
SaveExploits7
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.5 views

PT-2026-87102

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...

8.1CVSS0.01453EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/06 8:21 p.m.8 views

n8n-vulnerability-detection

n8n 漏洞检测 用于检测 n8n 漏洞的自动化 Nuclei 模板。 由@rxerium 创建 概述 适用于 n8n 工作流自动化的自动化 CVE 检测模板,每日监控并基于 GitHub Advisories、ProjectDiscovery 和 NVD 生成模板。 统计 :3 个 CVE(2023 年)+ 10 个 CVE(2025 年)= 13 个模板 使用方法 root@kitploit: Scan a single target nuclei -t 2025/CVE-2025-58360.yaml -u https://target.com Scan with all...

9.8CVSS7.9AI score0.64874EPSS
SaveExploits4References4
Kitploit
Kitploit
added 2026/09/05 11:23 p.m.6 views

CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ Uso simple Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Ejemplo de configuración: root@kitploit: git clo...

10CVSS8.4AI score0.99915EPSS
SaveExploits7
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.78 views

MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier contain...

9.8CVSS8.1AI score0.99737EPSS
SaveExploits4
EUVD
EUVD
added 2026/08/27 3:32 a.m.6 views

EUVD-2026-66829

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.2AI score0.00288EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/27 1:18 a.m.10 views

CVE-2026-81421

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

7.5CVSS0.00288EPSS
SaveExploits0References6
Rows per page
Query Builder