CFADVISORY-CL-application-security-waf-waf-release-2025-03-03

Exploit Intelligence

• Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others (github-poc-repo)
• Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others (github-poc)
• POC for CVE-2023-24489 with bash. (github-poc)
• This project is a Python script that exploits the CVE-2023-24489 vulnerability in ShareFile. It allows remote command execution on the target server. The script supports both Windows and Linux (On testing) platforms, and it can be used to exploit individual targets or perform mass checking on a list of URLs. (github-poc)
• agent_group.yaml (github-poc)
• kev.json (github-poc)
• web_poc_map_v2.yaml (github-poc)
• data.js (github-poc)
• Nuclei Template: CVE-2024-13161 (nuclei-template)
• Nuclei Template: CVE-2024-13160 (nuclei-template)

…and 2 more exploits

Timeline

• Mar 3, 2025 CVE Published

References

• WAF - WAF Release - 2025-03-03 advisory