漏洞描述
2024年互联网上披露CVE-2023-46805 Ivanti Pulse Connect Secure VPN SSRF致远程代码执行漏洞，攻击者可构造恶意请求触发SSRF，结合相关功能造成远程代码执行。
Ivanti Pulse Connect Secure VPN SSRF致远程代码执行漏洞
PoC代码
暂无相关漏洞推荐
- (CVE-2025-62712) JumpServer ConnectionToken 权限验证不当漏洞
- CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File Read
- Ivanti Pulse Connect Secure VPN /dana-na/auth/saml-sso.cgi XML 外部实体注入漏洞（CVE-2024-22024）
- WordPress InstaWP Connect 插件 / rest_route 文件上传漏洞（CVE-2024-2667）
- Oracle PeopleSoft /PSIGW/PeopleSoftServiceListeningConnector XML 外部实体注入漏洞（CVE-2017-3548）
- Cisco Secure Firewall Management Center和Cisco Secure Firewall Threat Defense 操作系统命令注入漏洞
- POC CVE-2025-22457: Ivanti Connect Secure - Stack-based Buffer Overflow
- POC CVE-2016-10960: WordPress wSecure Lite < 2.4 - Remote Code Execution
- POC CVE-2017-17043: WordPress Emag Marketplace Connector 1.0 - Cross-Site Scripting
- POC CVE-2018-10383: Lantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting
- POC CVE-2018-11759: Apache Tomcat JK Connect <=1.2.44 - Manager Access
- POC CVE-2018-19439: Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting
- POC CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File Read