Pwnverse/
Categories/
CVE Analysis/

CVE Analysis

2024

CVE 2024-37397 - Ivanti Endpoint Manager XXE Vulnerability

24 November 2024·2762 words·13 mins

CVE Analysis CVE-2024-37297 .NET OOB-XXE XXE

This blog provides an in-depth analysis of the exploitation process for an unauthenticated XXE vulnerability in Ivanti Endpoint Manager, identified as CVE-2024-37397.

CVE 2024-4040 - CrushFTP Server-Side Template Injection Vulnerability Analysis

9 May 2024·4802 words·23 mins

CVE Analysis Cve-2024-4040 Java SSTI RCE

This blog post contains a thorough analysis of Server Side Template Injection vulnerability in a commercial Managed File Transfer product named CrushFTP.