CVEs-PoC/2021/CVE-2021-44529.md

CVE-2021-44529

Description

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

POC

Reference

• http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/HimmelAward/Goby_POC
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/Ostorlab/KEV
• https://github.com/SYRTI/POC_to_review
• https://github.com/StarCrossPortal/scalpel
• https://github.com/WhooAmii/POC_to_review
• https://github.com/Z0fhack/Goby_POC
• https://github.com/anonymous364872/Rapier_Tool
• https://github.com/apif-review/APIF_tool_2024
• https://github.com/apit-review-account/apit-tool
• https://github.com/h00die-gr3y/Metasploit
• https://github.com/hogehuga/epss-db
• https://github.com/jax7sec/CVE-2021-44529
• https://github.com/jkana/CVE-2021-44529
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC
• https://github.com/trhacknon/Pocingit
• https://github.com/youcans896768/APIV_Tool
• https://github.com/zecool/cve