https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 18:36:40 +0000 https://vulnerability.circl.lu/sighting/7fd025c3-8bae-4dff-a87a-422e7d02b247/export {"uuid": "7fd025c3-8bae-4dff-a87a-422e7d02b247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44823", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2702", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Nagios Log Server \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043b\u043e\u0433\u043e\u0432 Nagios Log Server. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a BDU:2025-14348 \u0438 CVE-2025-44823, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e,...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 10:17 | Author: Vulner Queen\n\n#nagios #general_cyber_news #server\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-nagios-log-server-ugrozhaet-bezopasnosti-korporativnyh-sistem-monitoringa_16385", "creation_timestamp": "2026-09-10T00:00:45.739967Z"} {"uuid": "7fd025c3-8bae-4dff-a87a-422e7d02b247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44823", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2702", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Nagios Log Server \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043b\u043e\u0433\u043e\u0432 Nagios Log Server. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a BDU:2025-14348 \u0438 CVE-2025-44823, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e,...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 10:17 | Author: Vulner Queen\n\n#nagios #general_cyber_news #server\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-nagios-log-server-ugrozhaet-bezopasnosti-korporativnyh-sistem-monitoringa_16385", "creation_timestamp": "2026-09-10T00:00:45.739967Z"} https://vulnerability.circl.lu/sighting/7fd025c3-8bae-4dff-a87a-422e7d02b247/export Thu, 10 Sep 2026 00:00:45 +0000 https://vulnerability.circl.lu/sighting/7d57f1a9-4d42-4f12-80ea-81b8a5be7ecd/export {"uuid": "7d57f1a9-4d42-4f12-80ea-81b8a5be7ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44823", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2702", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Nagios Log Server \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043b\u043e\u0433\u043e\u0432 Nagios Log Server. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a BDU:2025-14348 \u0438 CVE-2025-44823, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e,...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 10:17 | Author: Vulner Queen\n\n#nagios #general_cyber_news #server\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-nagios-log-server-ugrozhaet-bezopasnosti-korporativnyh-sistem-monitoringa_16385", "creation_timestamp": "2026-09-09T05:00:10.547569Z"} {"uuid": "7d57f1a9-4d42-4f12-80ea-81b8a5be7ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44823", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2702", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Nagios Log Server \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043b\u043e\u0433\u043e\u0432 Nagios Log Server. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a BDU:2025-14348 \u0438 CVE-2025-44823, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e,...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 10:17 | Author: Vulner Queen\n\n#nagios #general_cyber_news #server\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-nagios-log-server-ugrozhaet-bezopasnosti-korporativnyh-sistem-monitoringa_16385", "creation_timestamp": "2026-09-09T05:00:10.547569Z"} https://vulnerability.circl.lu/sighting/7d57f1a9-4d42-4f12-80ea-81b8a5be7ecd/export Wed, 09 Sep 2026 05:00:10 +0000 https://vulnerability.circl.lu/sighting/7d3178cd-4e43-41de-85ed-a69633b452b3/export {"uuid": "7d3178cd-4e43-41de-85ed-a69633b452b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4428", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"CERT-EU\", \"Sonny Macdonald\", \"Piotr Bazydlo\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution exploit chain for Ivanti EPMM,\\n tracked as CVE-2025-4427 and CVE-2025-4428. An authentication flaw permits unauthenticated\\n access to an administrator web API endpoint, which allows for code execution via expression\\n language injection. This module executes in the context of the 'tomcat' user. This module\\n should also work on many versions of MobileIron Core (rebranded as Ivanti EPMM).\", \"disclosure_date\": \"2025-05-13\", \"fullname\": \"exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Ivanti EPMM Authentication Bypass for Expression Language Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"references\": [\"CVE-2025-4427\", \"EDB-52421\", \"CVE-2025-4428\", \"URL-https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM?language=en_US\", \"URL-https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428\", \"URL-https://blog.eclecticiq.com/china-nexus-threat-actor-actively-exploiting-ivanti-endpoint-manager-mobile-cve-2025-4428-vulnerability\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:50.753260Z"} {"uuid": "7d3178cd-4e43-41de-85ed-a69633b452b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4428", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"CERT-EU\", \"Sonny Macdonald\", \"Piotr Bazydlo\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution exploit chain for Ivanti EPMM,\\n tracked as CVE-2025-4427 and CVE-2025-4428. An authentication flaw permits unauthenticated\\n access to an administrator web API endpoint, which allows for code execution via expression\\n language injection. This module executes in the context of the 'tomcat' user. This module\\n should also work on many versions of MobileIron Core (rebranded as Ivanti EPMM).\", \"disclosure_date\": \"2025-05-13\", \"fullname\": \"exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Ivanti EPMM Authentication Bypass for Expression Language Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"references\": [\"CVE-2025-4427\", \"EDB-52421\", \"CVE-2025-4428\", \"URL-https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM?language=en_US\", \"URL-https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428\", \"URL-https://blog.eclecticiq.com/china-nexus-threat-actor-actively-exploiting-ivanti-endpoint-manager-mobile-cve-2025-4428-vulnerability\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:50.753260Z"} https://vulnerability.circl.lu/sighting/7d3178cd-4e43-41de-85ed-a69633b452b3/export Tue, 08 Sep 2026 06:49:50 +0000 https://vulnerability.circl.lu/sighting/5b2a6b0a-73d5-4d91-bea8-b33bc8054e64/export {"uuid": "5b2a6b0a-73d5-4d91-bea8-b33bc8054e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4427", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"CERT-EU\", \"Sonny Macdonald\", \"Piotr Bazydlo\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution exploit chain for Ivanti EPMM,\\n tracked as CVE-2025-4427 and CVE-2025-4428. An authentication flaw permits unauthenticated\\n access to an administrator web API endpoint, which allows for code execution via expression\\n language injection. This module executes in the context of the 'tomcat' user. This module\\n should also work on many versions of MobileIron Core (rebranded as Ivanti EPMM).\", \"disclosure_date\": \"2025-05-13\", \"fullname\": \"exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Ivanti EPMM Authentication Bypass for Expression Language Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"references\": [\"CVE-2025-4427\", \"EDB-52421\", \"CVE-2025-4428\", \"URL-https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM?language=en_US\", \"URL-https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428\", \"URL-https://blog.eclecticiq.com/china-nexus-threat-actor-actively-exploiting-ivanti-endpoint-manager-mobile-cve-2025-4428-vulnerability\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:50.675940Z"} {"uuid": "5b2a6b0a-73d5-4d91-bea8-b33bc8054e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4427", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"CERT-EU\", \"Sonny Macdonald\", \"Piotr Bazydlo\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution exploit chain for Ivanti EPMM,\\n tracked as CVE-2025-4427 and CVE-2025-4428. An authentication flaw permits unauthenticated\\n access to an administrator web API endpoint, which allows for code execution via expression\\n language injection. This module executes in the context of the 'tomcat' user. This module\\n should also work on many versions of MobileIron Core (rebranded as Ivanti EPMM).\", \"disclosure_date\": \"2025-05-13\", \"fullname\": \"exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Ivanti EPMM Authentication Bypass for Expression Language Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"references\": [\"CVE-2025-4427\", \"EDB-52421\", \"CVE-2025-4428\", \"URL-https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM?language=en_US\", \"URL-https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428\", \"URL-https://blog.eclecticiq.com/china-nexus-threat-actor-actively-exploiting-ivanti-endpoint-manager-mobile-cve-2025-4428-vulnerability\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:50.675940Z"} https://vulnerability.circl.lu/sighting/5b2a6b0a-73d5-4d91-bea8-b33bc8054e64/export Tue, 08 Sep 2026 06:49:50 +0000 https://vulnerability.circl.lu/sighting/02a330df-2800-44cc-841f-dfe760af54cd/export {"uuid": "02a330df-2800-44cc-841f-dfe760af54cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4403", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-07T01:00:11.546900Z"} {"uuid": "02a330df-2800-44cc-841f-dfe760af54cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4403", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-07T01:00:11.546900Z"} https://vulnerability.circl.lu/sighting/02a330df-2800-44cc-841f-dfe760af54cd/export Mon, 07 Sep 2026 01:00:11 +0000 https://vulnerability.circl.lu/sighting/e5eeb57f-90a5-407e-bce6-57dbea7d26f0/export {"uuid": "e5eeb57f-90a5-407e-bce6-57dbea7d26f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4403", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-06T15:00:03.458958Z"} {"uuid": "e5eeb57f-90a5-407e-bce6-57dbea7d26f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4403", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-06T15:00:03.458958Z"} https://vulnerability.circl.lu/sighting/e5eeb57f-90a5-407e-bce6-57dbea7d26f0/export Sun, 06 Sep 2026 15:00:03 +0000 https://vulnerability.circl.lu/sighting/3486caa2-bcbd-48b1-9238-bbbe670f67a0/export {"uuid": "3486caa2-bcbd-48b1-9238-bbbe670f67a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/168959", "content": "XSS Mass Hunting CVE-2025-44148\nhttps://medium.com/legionhunters/xss-mass-hunting-cve-2025-44148-8737e86c04d9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:01:00.522445Z"} {"uuid": "3486caa2-bcbd-48b1-9238-bbbe670f67a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/168959", "content": "XSS Mass Hunting CVE-2025-44148\nhttps://medium.com/legionhunters/xss-mass-hunting-cve-2025-44148-8737e86c04d9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:01:00.522445Z"} https://vulnerability.circl.lu/sighting/3486caa2-bcbd-48b1-9238-bbbe670f67a0/export Fri, 04 Sep 2026 00:01:00 +0000 https://vulnerability.circl.lu/sighting/89d0413e-9621-4677-a1f2-7e9045985807/export {"uuid": "89d0413e-9621-4677-a1f2-7e9045985807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/168961", "content": "Google + Shodan + FOFA + ZoomEye DorkingContinue reading on LegionHunters \u00bb (https://medium.com/legionhunters/xss-mass-hunting-cve-2025-44148-8737e86c04d9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:00.481056Z"} {"uuid": "89d0413e-9621-4677-a1f2-7e9045985807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/168961", "content": "Google + Shodan + FOFA + ZoomEye DorkingContinue reading on LegionHunters \u00bb (https://medium.com/legionhunters/xss-mass-hunting-cve-2025-44148-8737e86c04d9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:00.481056Z"} https://vulnerability.circl.lu/sighting/89d0413e-9621-4677-a1f2-7e9045985807/export Fri, 04 Sep 2026 00:01:00 +0000 https://vulnerability.circl.lu/sighting/e418aca5-62f4-45b1-b01d-ae87b62d4664/export {"uuid": "e418aca5-62f4-45b1-b01d-ae87b62d4664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "seen", "source": "https://t.me/hacking_Attack/168953", "content": "XSS Mass Hunting CVE-2025-44148\n\nGoogle + Shodan + FOFA + ZoomEye DorkingContinue reading on LegionHunters \u00bb\nRead more...", "creation_timestamp": "2026-09-04T00:01:00.229235Z"} {"uuid": "e418aca5-62f4-45b1-b01d-ae87b62d4664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "seen", "source": "https://t.me/hacking_Attack/168953", "content": "XSS Mass Hunting CVE-2025-44148\n\nGoogle + Shodan + FOFA + ZoomEye DorkingContinue reading on LegionHunters \u00bb\nRead more...", "creation_timestamp": "2026-09-04T00:01:00.229235Z"} https://vulnerability.circl.lu/sighting/e418aca5-62f4-45b1-b01d-ae87b62d4664/export Fri, 04 Sep 2026 00:01:00 +0000 https://vulnerability.circl.lu/sighting/3d9713a1-8af2-4a5f-89a3-77e919f68301/export {"uuid": "3d9713a1-8af2-4a5f-89a3-77e919f68301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/166206", "content": "I am Will Star a security newbie. Today I will talk about my little exploration in finding vulnerabilities in enterprise web and how I\u2026Continue reading on Medium \u00bb (https://medium.com/@will.star/cve-2025-44148-cross-site-scripting-xss-vulnerability-on-a-small-business-f88f109262f6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:59.046352Z"} {"uuid": "3d9713a1-8af2-4a5f-89a3-77e919f68301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/166206", "content": "I am Will Star a security newbie. Today I will talk about my little exploration in finding vulnerabilities in enterprise web and how I\u2026Continue reading on Medium \u00bb (https://medium.com/@will.star/cve-2025-44148-cross-site-scripting-xss-vulnerability-on-a-small-business-f88f109262f6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:59.046352Z"} https://vulnerability.circl.lu/sighting/3d9713a1-8af2-4a5f-89a3-77e919f68301/export Fri, 04 Sep 2026 00:00:59 +0000