235 matches found
Metasploit Wrap-Up
Self-Service Remote Code Execution This week, our own @wvu-r7 added an exploit module that achieves unauthenticated remote code execution in ManageEngine ADSelfService Plus, a self-service password management and single sign-on solution for Active Directory. This new module leverages a REST API...
APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus
Summary This Joint Cybersecurity Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework, Version 8. See the ATT&CK for Enterprise for referenced threat actor tactics and for techniques. This joint advisory is the result of analytic efforts between the...
Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus
Microsoft has detected exploits being used to compromise systems running the ZOHO ManageEngine ADSelfService Plus software versions vulnerable to CVE-2021-40539 in a targeted campaign. Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group...
Security Researchers Reveal Activity Targeting ManageEngine ADSelfService Plus
On September 16, CISA released a joint alert on exploitation of a vulnerability CVE-2021-40539 in ManageEngine ADSelfService Plus. On November 8, security researchers from Palo Alto Networks and Microsoft Threat Intelligence Center MSTIC released separate reports on targeted attacks against...
Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit
At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho's ManageEngine ADSelfService Plus self-service password management and single sign-on SSO solution. The spying...
Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus
Exploitation code for CVE-2021-40539...
Zoho ManageEngine ADSelfService Plus server-side request forgery vulnerability (CNVD-2021-88244)
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A server-side request forgery vulnerability exists in Zoho ManageEngin...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37424
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
Code injection
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
CVE-2021-37424
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
PT-2021-21643
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 6112 Description The issue is related to a Server-Side Request Forgery SSRF vulnerability. SSRF is a type of attack where an attacker can trick a server into making requests to internal or...
PT-2021-21644
Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to 6112 Description The issue allows for mail spoofing. Recommendations For versions prior to 6112, update to version 6112 or later to resolve the issue...
PT-2021-21648
Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to 6112 Description The issue allows for domain user account takeover. Recommendations For versions prior to 6112, update to version 6112 or later to resolve the issue...
CVE-2021-37420: Missing Authentication for Critical Function
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37424: Undefined Security Weakness
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
CVE-2021-37419: Server-Side Request Forgery (SSRF)
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability
The Federal Bureau of Investigation FBI, CISA, and Coast Guard Cyber Command CGCYBER have released a Joint Cybersecurity Advisory CSA detailing the active exploitation of an authentication bypass vulnerability CVE-2021-40539 in Zoho ManageEngine ADSelfService Plus—a self-service password manageme...
