VulnCheck KEV: CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

EUVD-2025-28653

Malicious code in bioql PyPI...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

creationtimestamp| type| source ---|---|--- 2025-01-31 00:59:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113920254948615257 2025-01-31 01:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyt5skr3k2c 2025-01-31 03:35:32+00:00| seen|...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

CVE-2023-28653

Summary of CVE-2023-28653 : Horner Automation Cscape and Cscape EnvisionRV are affected by a vulnerability caused by insufficient validation of user-supplied data when parsing project files (e.g., CSP), which can lead to a use-after-free and arbitrary code execution in the current process. Affect...

CVE-2023-28653

The affected application lacks proper validation of user-supplied data when parsing project files e.g., CSP. This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2022-28653

Users can consume unlimited disk space in /var/crash...

ManageEngine OpManager SumPDU Java Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine OpManager SumPDU Java Deserialization', 'Description' = %q An HTTP endpoint used by the Manage Engine OpManager Smart Update Manager...

Exploit for CVE-2020-2853

Manage Engine OpManager CVE-2020-28653 Proof of Concept This...

CVE-2021-28653

creationtimestamp| type| source ---|---|--- 2021-03-19 06:32:54+00:00| seen| https://t.me/cibsecurity/25163...

CVE-2020-28653

creationtimestamp| type| source ---|---|--- 2021-02-03 18:49:33+00:00| seen| https://t.me/cibsecurity/23028 2021-09-20 17:34:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/opmanagersumpdudeserialization.rb 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-28653

Affected software/overview: ManageEngine OpManager SumPDU Java Deserialization vulnerability in OpManager, 12.1 to 12.5.x (before 125203; released before 125233). Root cause / vulnerability type: Untrusted Java object deserialization in the SumPDU servlet allows remote code execution (pre-auth). ...

CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...