Blogs

ivanti just pushed a patch for a Critical CVSS 9.8 Remote Code Execution Vulnerability that I reported on May 1st 2024, impacting Ivanti Endpoint Manager (EPM)

I discovered an unauthenticatedagainst the latest version of progress whatsup gold and turned it into authentication bypass, this is the story of CVE-2024-6670

I discovered an unauthenticated path traversal against the latest version of progress whatsup gold and turned it into a pre-auth RCE, following is how I did it, this is the story of CVE-2024-4885

Using a path traversal vulnerability to achieve remote code execution, this is the story of CVE-2024-4883 a pre-auth RCE against progress whatsup gold

Lets analyze a privilege escalation which I found targeting progress whatsup gold, this is the story of CVE-2024-5009

CVE-2024-29855

CVE-2024-29849

CVE-2024-4358

CVE-2023-34039

CVE-2023-20887

CVE-2021-39144, CVE-2022-31678

CVE-2022-26503,CVE-2022-26504,CVE-2022-26500,CVE-2022-26501