VulnCheck KEV: CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

EUVD-2025-28653

Malicious code in bioql PyPI...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

creationtimestamp| type| source ---|---|--- 2025-01-31 00:59:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113920254948615257 2025-01-31 01:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyt5skr3k2c 2025-01-31 03:35:32+00:00| seen|...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2023-28653

Summary of CVE-2023-28653 : Horner Automation Cscape and Cscape EnvisionRV are affected by a vulnerability caused by insufficient validation of user-supplied data when parsing project files (e.g., CSP), which can lead to a use-after-free and arbitrary code execution in the current process. Affect...

CVE-2023-28653

The affected application lacks proper validation of user-supplied data when parsing project files e.g., CSP. This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

ManageEngine OpManager SumPDU Java Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine OpManager SumPDU Java Deserialization', 'Description' = %q An HTTP endpoint used by the Manage Engine OpManager Smart Update Manager...

Exploit for CVE-2020-2853

Manage Engine OpManager CVE-2020-28653 Proof of Concept This...

CVE-2021-28653

creationtimestamp| type| source ---|---|--- 2021-03-19 06:32:54+00:00| seen| https://t.me/cibsecurity/25163...

CVE-2020-28653

creationtimestamp| type| source ---|---|--- 2021-02-03 18:49:33+00:00| seen| https://t.me/cibsecurity/23028 2021-09-20 17:34:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/opmanagersumpdudeserialization.rb 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-28653

CVE-2020-28653 affects ManageEngine OpManager SumPDU Java Deserialization in OpManager 12.1–12.5.x prior to build 125203 (released before 125233). The SUMPDU servlet allows unauthenticated remote code execution via deserialization of arbitrary Java objects, enabling remote code execution on the s...

CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...