CVE-2022-47966_checker

CVE-2022-47966checker ManageEngine CVE-2022-47966のIOCを検索するための簡易PowerShellスクリプトです。このスクリプトは、ME HTTPアクセスログ内のリクエストを解析します。特徴的なSAMLリクエストが見つかった場合、攻撃者のペイロードをデコードして抽出しようとします。結果は C:\aceresponderCVE-2022-47966checker.csv に書き込まれます。管理者として実行してください。...

Golang-CVE-2021-44077-POC

Golang-CVE-2021-44077-POC このエクスプロイトは、Zoho ManageEngine ServiceDesk Plus msiexec.exe 次に、エクスプロイトを実行します。 go run CVE-2021-44077.go -u "http://192.168.1.3:8080/" -f "/msiexec.exe" -u は脆弱な URL です -f は悪意のあるファイルです...

CVE-2019-12541

CVE-2019-12541 Zoho ManageEngine ServiceDesk Plus 9.3 の SolutionSearch.do における XSS 脆弱性 情報説明: Zoho ManageEngine ServiceDesk Plus 9.3 に問題が発見されました。SolutionSearch.do の searchText パラメータを介して XSS が発生します。 著者: Tarantula Team の Concobe - VinCSS Vingroup のメンバー Payload...

Zoho ManageEngine ServiceDesk Plus - Remote Code Execution

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. id: CVE-2021-44077 info: name: Zoho ManageEngine ServiceDesk Plus - Remote Code Execution author: Adam Crosser,gy741...

CVE-2019-12541

An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter...

EUVD-2017-3128

Malware in sbrugna...

EUVD-2016-5865

Malware in sbrugna...

EUVD-2011-1511

Malware in sbrugna...

EUVD-2017-18311

Malware in sbrugna...

EUVD-2008-1306

Malware in sbrugna...

EUVD-2017-18297

Malware in sbrugna...

EUVD-2012-2571

Malware in sbrugna...

EUVD-2011-2730

Malware in sbrugna...

EUVD-2011-2731

Malware in sbrugna...

EUVD-2016-5866

Malware in sbrugna...

EUVD-2011-2732

Malware in sbrugna...

EUVD-2011-1510

Malware in sbrugna...

EUVD-2023-38296

Malicious code in bioql PyPI...

ManageEngine ServiceDesk Plus < 15.1 Build 15110 Privilege Escalation

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 15.1 Build 15110. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2025-8309 advisory. - A privilege escalation vulnerability caused by the overly permissive regular expression...

CVE-2024-41150

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800...