CVE-2022-28219

CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine ADAudit Plus builds -l -d -f /windows/win.ini Or to run calc.exe on the target: python3 CVE-2022-28219.py -t targe...

cve-2026-6516-scanner

cve-2026-6516-scanner.py Find ManageEngine ADAudit Plus web servers in a target list or nmap output and flag builds affected by CVE-2026-6516 — in a single dependency-free Python file. cve-2026-6516-scanner.py identifies ADAudit Plus web servers with HTTP fingerprinting, probes the Agent API...

Zoho ManageEngine ADAudit Plus <7600 - XML Entity Injection/Remote Code Execution

Zoho ManageEngine ADAudit Plus before version 7060 is vulnerable to an unauthenticated XML entity injection attack that can lead to remote code execution. id: CVE-2022-28219 info: name: Zoho ManageEngine ADAudit Plus 7600 - XML Entity Injection/Remote Code Execution author: dwisiswant0 severity:...

CVE-2026-76981

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module...

CVE-2026-12062

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API...

CVE-2026-12062

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are susceptible to an authenticated SQL injection vulnerability located in the ADAudit Plus Reports API . This vulnerability, associated with CWE-89 , allows an authenticated attacker to execute unintended SQL commands. The impact is ...

EUVD-2026-123280

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API...

CVE-2026-12062 Authenticated SQL Injection

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API...

CVE-2026-76981

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second-order SQL injection vulnerability within the custom reports module . This vulnerability allows an authenticated attacker to perform SQL injection, potentially leading to unauthorized data acce...

CVE-2026-76981 Authenticated Second-Order SQL Injection

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module...

EUVD-2026-123274

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module...

CVE-2026-12062: Zohocorp ADAudit Plus: Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection…

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API...

ManageEngine ADAudit Plus Build 8605 Vulnerability Scanner

ManageEngine ADAudit Plus versions before build 8606 contain an unauthenticated remote code execution issue in the Agent API. This tool fingerprints HTTP services, identifies exposed Agent API endpoints, and reports detected build versions...

Exploit for CVE-2026-6516

cve-2026-6516-scanner.py...

ManageEngine ADAudit Plus < Build 8606 Unauthenticated RCE

The ManageEngine ADAudit Plus running on the remote host is prior to build 8606. It is, therefore, affected by an unauthenticated remote code execution vulnerability: - Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by unauthenticated remote code execution due to the...

The vulnerability was not addressed in ManageEngine ADAudit Plus of ZohoCorp.

ZohoCorp has identified a vulnerability in ManageEngine ADAudit Plus. The vulnerability resides in the agent API of ManageEngine ADAudit Plus versions prior to 8606. Due to incorrect validation in the API, attackers can execute arbitrary code without authentication. All implementations using...

CVE-2026-6516

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

CVE-2026-6516

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

EUVD-2026-48337

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

CVE-2026-6516 Remote Code Execution

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...