310 matches found
CVE-2019-12541
CVE-2019-12541 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SolutionSearch.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. Author: Concobe of Tarantula Team - VinCSS a member...
Golang-CVE-2021-44077-POC
Golang-CVE-2021-44077-POC This exploit is an unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus msiexec.exe Then, run the exploit. go run CVE-2021-44077.go -u "http://192.168.1.3:8080/" -f "/msiexec.exe" -u is the vulnerable URL -f is your malicious file...
Zoho ManageEngine ServiceDesk Plus - Remote Code Execution
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. id: CVE-2021-44077 info: name: Zoho ManageEngine ServiceDesk Plus - Remote Code Execution author: Adam Crosser,gy741...
ManageEngine ServiceDesk RCE (CVE-2021-44077)
Exploits CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus: unauthenticated zip upload to /RestAPI/ImportTechnicians achieves path traversal and RCE. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus ImportTechnicians RCE CVE-2021-44077.""" import io import zipfile fro...
ManageEngine SDP - FileDownload.jsp fName File Read
Reads arbitrary files via ManageEngine ServiceDesk Plus FileDownload.jsp fName path traversal with null-byte truncation. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus FileDownload.jsp fName file read.""" from urllib.parse import quote from kittysploit import from...
ManageEngine SDP - FileDownload.jsp Path Traversal Detection
Detects ManageEngine ServiceDesk Plus FileDownload.jsp fName path traversal to /etc/passwd via null-byte truncation. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus FileDownload.jsp path traversal.""" import re from kittysploit import from lib.protocols.http.httpclient...
Zoho ManageEngine ServiceDesk Plus - Remote Code Execution Detection
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP befor...
CVE-2019-12541
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter...
EUVD-2012-2571
Malware in sbrugna...
EUVD-2011-2732
Malware in sbrugna...
EUVD-2008-1306
Malware in sbrugna...
EUVD-2011-2730
Malware in sbrugna...
EUVD-2011-2731
Malware in sbrugna...
EUVD-2011-1510
Malware in sbrugna...
EUVD-2011-1511
Malware in sbrugna...
EUVD-2016-5865
Malware in sbrugna...
EUVD-2016-5866
Malware in sbrugna...
EUVD-2017-18297
Malware in sbrugna...