EUVD-2017-3176

Malware in sbrugna...

EUVD-2018-10432

Malware in sbrugna...

EUVD-2020-11458

Malware in sbrugna...

EUVD-2006-2344

Malware in sbrugna...

EUVD-2019-6175

Malware in sbrugna...

EUVD-2007-3578

Malware in sbrugna...

EUVD-2018-10431

Malware in sbrugna...

EUVD-2024-47785

Malicious code in bioql PyPI...

EUVD-2022-46474

Malicious code in bioql PyPI...

EUVD-2021-31347

Malicious code in bioql PyPI...

EUVD-2024-37654

Malicious code in bioql PyPI...

ManageEngine OpManager Reflected XSS (CVE-2025-41437)

The version of ManageEngine OpManager running on the remote web server is earlier than 128463, between 128509 and 128541 inclusive, between 128551 and 128554 inclusive, or exactly 128565. It is, therefore, affected by a reflected XSS vulnerability on the login page. Note that Nessus has not teste...

CVE-2025-41437: Improper Neutralization of Input During Web Page Generation

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the login page...

CVE-2024-38870

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module...

CVE-2023-47211

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability...

CVE-2022-43473

A blind XML External Entity XXE vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability...

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

CVE-2021-3287

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...

CVE-2020-11527

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files...

CVE-2020-12116

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request...