6460 matches found
Design/Logic Flaw
Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login...
CVE-2022-28987
Vulnerability summary: Zoho ManageEngine ADSelfService Plus (pre-6202, e.g., 6121) is affected by CVE-2022-28987. A crafted POST to /ServletAPI/accounts/login enables username enumeration by revealing differences in responses for existing versus non-existing users, via the Forgot Password/login f...
CVE-2022-28987
Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login...
PT-2022-19345
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 6202 Description The issue allows attackers to perform username enumeration via a crafted POST request to "/ServletAPI/accounts/login". This enables attackers to identify valid usernames,...
ZOHO ManageEngine ADSelfService Plus 安全漏洞
ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A security vulnerability exists in ZOHO ManageEngine ADSelfService Plus version 6.1. An attacker exploited the vulnerability to perfo...
CVE-2022-28987: Undefined Security Weakness
Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login...
ManageEngine Password Manager Pro REST API Restriction Bypass (CVE-2022-29081)
Binary data manageenginepmpcve-2022-29081.nbin...
ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure Exploit
Exploit Title: ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/self-service-password/download.html Details:...
ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure
Exploit Title: ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/self-service-password/download.html Details:...
ZOHO ManageEngine OpManager SQL Injection Vulnerability (CNVD-2022-68819)
ZOHO ManageEngine OpManager is a network, server, and virtualization monitoring software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine OpManager version 125588 and prior versions, which can be exploited by remote attackers to perform SQL injection via some default...
CISA Alert: Top 15 Routinely Exploited Vulnerabilities
The U.S. Cybersecurity & Infrastructure Security Agency has published its report on the top exploited vulnerabilities of 2021. This blog summarizes the report’s findings and how you can use Qualys VMDR to automatically detect and remediate these risks in your enterprise environment. The...
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
Sql injection
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
CVE-2022-29535
Summary: CVE-2022-29535 affects Zoho ManageEngine OPManager (version 125588 and prior). Multiple connected sources describe a SQL injection vulnerability that can be exploited via some default reports, enabling remote attackers to execute arbitrary SQL commands. The issue is confirmed across NVD,...
PT-2022-19685
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OPManager versions through 125588 Description The issue allows SQL Injection via a few default reports. Recommendations For versions through 125588, update to a version that contains a fix for this issue to prevent SQL...
ManageEngine SharePoint Manager Plus < 4329 Multiple Vulnerabilities
Binary data manageenginesharepointmanagerplus4329.nbin...
ZOHO ManageEngine OpManager SQL注入漏洞
ZOHO ManageEngine OpManager is a network, server, and virtualization monitoring software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine OpManager version 125588 and prior versions, which can be exploited by remote attackers to perform SQL injection via some default...