CVE-2024-7593

This Bash script exploits an authentication bypass vulnerability in Ivanti vTM (CVE-2024-7593) by creating a new admin user via a crafted POST request. It uses curl to send the payload and checks the response for success.

This repository contains a writeup for CVE-2024-7593, a critical RCE vulnerability in Pulse Secure VPN. It includes technical details, affected versions, mitigation measures, and search dorks for identifying vulnerable systems.

This repository provides a Nuclei template for detecting CVE-2024-7593, an authentication bypass vulnerability in Ivanti Virtual Traffic Manager. It matches specific versions and a login page string to identify vulnerable hosts.

This Metasploit module exploits an authentication bypass vulnerability in Ivanti Virtual Traffic Manager (vTM) by adding a new administrative user via a crafted POST request. It verifies the vulnerability by checking the version and confirms successful exploitation by logging in with the newly created credentials.

The repository contains a functional exploit for CVE-2024-7593, an authentication bypass vulnerability in Ivanti vTM. The YAML file includes HTTP requests to create a local admin user and bypass authentication, demonstrating the vulnerability.