434 matches found
CVE-2022-23779
CVE-2022-23779: Vulnerabilidad de divulgación del nombre de host interno Información Descripción: Zoho ManageEngine Desktop Central anterior a 10.1.2137.8 expone el nombre del servidor instalado a cualquier persona. El nombre de host interno se puede descubrir leyendo las respuestas de redirecció...
CVE-2022-23779
CVE-2022-23779 CVE-2022-23779 是 Zoho ManageEngine Desktop Central 中的一个安全漏洞 它被归类为信息泄露问题（CWE-200），软件会向未授权用户泄露内部服务器信息。 受影响版本为 10.1.2137.8 之前 ::中等严重性 利用细节与影响 存在概念验证代码，展示了如何通过 HTTP 请求（例如访问 /themes）在重定向的 Location 头中泄露主机名。 泄露内部主机名本身并不会导致接管，但：它为攻击者提供了网络和服务器洞察，用于信息收集。 有用的内部标识符有助于定向攻击或横向移动规划。 示例请求（curl）：...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Zohocorp Manageengine_Desktop_Central
CVE-2022-23779 CVE-2022-23779 is a security vulnerability in Z...
CVE-2021-28960
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations...
CVE-2022-23779
Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses...
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
CVE-2020-24397
An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM...
EUVD-2020-20540
Malware in sbrugna...
EUVD-2018-5354
Malware in sbrugna...
EUVD-2018-8630
Malware in sbrugna...
EUVD-2019-7440
Malware in sbrugna...
EUVD-2020-3265
Malware in sbrugna...
EUVD-2018-17118
Malware in sbrugna...
EUVD-2017-8094
Malware in sbrugna...
EUVD-2018-17120
Malware in sbrugna...
EUVD-2021-32866
Malicious code in bioql PyPI...
EUVD-2023-54616
Malicious code in bioql PyPI...
EUVD-2021-32865
Malicious code in bioql PyPI...