{"schema":"vulnpedia.poc/1","cve":"CVE-2025-0282","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2025-01-08","ransomware":true},"epss":{"score":0.99981,"percentile":0.99982},"cvss":{"version":"3.1","score":9,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d343e6784986","executable":false,"sourceId":"d343e6784986","verification":"catalogued","source":"vulncheck-kev","modified":"2025-01-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d343e6784986","modified":"2025-01-08T00:00:00Z","url":"https://vulncheck.com/xdb/d343e6784986"}],"repositoryUrl":"https://github.com/sfewer-r7/CVE-2025-0282"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/043030d6caa4","executable":false,"sourceId":"043030d6caa4","verification":"catalogued","source":"vulncheck-kev","modified":"2025-01-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"043030d6caa4","modified":"2025-01-08T00:00:00Z","url":"https://vulncheck.com/xdb/043030d6caa4"}],"repositoryUrl":"https://github.com/44xo/CVE-2025-0282"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/858b463ecabe","executable":false,"sourceId":"858b463ecabe","verification":"catalogued","source":"vulncheck-kev","modified":"2025-01-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"858b463ecabe","modified":"2025-01-08T00:00:00Z","url":"https://vulncheck.com/xdb/858b463ecabe"}],"repositoryUrl":"https://github.com/almanatra/CVE-2025-0282"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/85fcb27bdd09","executable":false,"sourceId":"85fcb27bdd09","verification":"catalogued","source":"vulncheck-kev","modified":"2025-01-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"85fcb27bdd09","modified":"2025-01-08T00:00:00Z","url":"https://vulncheck.com/xdb/85fcb27bdd09"}],"repositoryUrl":"https://github.com/B1ack4sh/Blackash-CVE-2025-0282"},{"kind":"exploitdb","id":"52213","url":"https://www.exploit-db.com/exploits/52213","code":"https://www.exploit-db.com/download/52213","executable":true}],"poc_candidates":[{"url":"https://github.com/absholi7ly/CVE-2025-0282-Ivanti-exploit","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overflow exploit.","modified":"2026-05-31T09:52:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/absholi7ly/CVE-2025-0282-Ivanti-exploit"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2026-05-31T09:52:58Z","url":"https://github.com/absholi7ly/CVE-2025-0282-Ivanti-exploit"}],"tags":[]},{"url":"https://github.com/AnonStorks/CVE-2025-0282-Full-version","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]","modified":"2026-04-15T07:46:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/AnonStorks/CVE-2025-0282-Full-version"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2026-04-15T07:46:46Z","url":"https://github.com/AnonStorks/CVE-2025-0282-Full-version"}],"tags":[]},{"url":"https://github.com/rxwx/pulse-meter","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.","modified":"2025-02-21T16:57:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/rxwx/pulse-meter"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2025-02-21T16:57:58Z","url":"https://github.com/rxwx/pulse-meter"}],"tags":[]},{"url":"https://github.com/watchtowrlabs/CVE-2025-0282","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)","modified":"2025-12-24T01:47:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/watchtowrlabs/CVE-2025-0282"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2025-12-24T01:47:00Z","url":"https://github.com/watchtowrlabs/CVE-2025-0282"}],"tags":[]},{"url":"https://github.com/sfewer-r7/CVE-2025-0282","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways","modified":"2026-10-25T05:04:33Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/sfewer-r7/CVE-2025-0282"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2026-10-25T05:04:33Z","url":"https://github.com/sfewer-r7/CVE-2025-0282"}],"tags":[]},{"url":"https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887.","modified":"2026-10-17T10:30:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2026-10-17T10:30:30Z","url":"https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser"}],"tags":[]},{"url":"https://github.com/almanatra/CVE-2025-0282","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"Exploit for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways","modified":"2025-07-21T16:35:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/almanatra/CVE-2025-0282"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2025-07-21T16:35:07Z","url":"https://github.com/almanatra/CVE-2025-0282"}],"tags":[]},{"url":"https://github.com/AdaniKamal/CVE-2025-0282","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282","modified":"2025-04-24T06:54:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/AdaniKamal/CVE-2025-0282"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2025-04-24T06:54:14Z","url":"https://github.com/AdaniKamal/CVE-2025-0282"}],"tags":[]},{"url":"https://github.com/gmh5225/Blackash-CVE-2025-0282","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"CVE-2025-0282","modified":"2025-06-08T00:00:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/gmh5225/Blackash-CVE-2025-0282"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2025-06-08T00:00:57Z","url":"https://github.com/gmh5225/Blackash-CVE-2025-0282"}],"tags":[]},{"url":"https://github.com/razureink/cve-2025-0282-ivanti_rce_reproduction","source":"poc-in-github","sourceId":"CVE-2025-0282","description":"Reproduction of cve-2025-0282-ivanti_rce_reproduction","modified":"2026-07-24T06:48:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0282","url":"https://github.com/razureink/cve-2025-0282-ivanti_rce_reproduction"},{"source":"poc-in-github","sourceId":"CVE-2025-0282","modified":"2026-07-24T06:48:01Z","url":"https://github.com/razureink/cve-2025-0282-ivanti_rce_reproduction"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2025-0282 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2025-0282 && searchsploit -m 52213","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2025-0282/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0282.yaml","template":"http/cves/2025/CVE-2025-0282.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2025-0282%22&type=repositories","executable":false}]}