CVE-2022-23779

CVE-2022-23779: 内部ホスト名開示の脆弱性 情報 説明: Zoho ManageEngine Desktop Central 10.1.2137.8 未満では、インストールされたサーバー名が誰でも知ることができます。内部ホスト名はHTTPリダイレクト応答を読むことで発見できます。 影響を受けるバージョン: 10.1.2137.7 研究者: Matthew Zellner @fbusr 開示リンク: https://www.manageengine.com/products/desktop-central/cve-2022-23779.html NIST CVEリンク:...

CVE-2020-35682

CVE-2020-35682 SD-91948: CVE-2020-35682: ServiceDesk Plus の SAML ログイン時における認証バイパス脆弱性。ManageEngine による説明。ターゲットの ServiceDesk Plus 11134 インストールで SAML ログインが有効になっており、低権限ユーザーの資格情報を持っている場合、管理者に権限昇格し、RCE を得ることができます。 このバグを悪用するための公開エクスプロイトも詳細な説明も存在しなかったため、この POC を公開することにしました。コードはかなり雑ですが、動作します。 インストール...

CVE-2019-10008

CVE-2019-10008 ManageEngine Service Desk Plus 9.3 권한 계정 하이재킹 날짜: 30-03-2019 익스플로잇 작성자: Ata Hakçıl, Melih Kaan Yıldız 공급업체: ManageEngine 공급업체 홈페이지:www.manageengine.com 제품: Service Desk Plus 버전: 10.0 테스트 환경: Windows 10 64비트 CVE : 2019-10008 완전한 PoC는 공급업체 패치 후에 다시 공개됩니다. 추가 정보:...

CVE-2021-44077

CVE-2021-44077 CVE-2021-44077 の概念実証エクスプロイト: ManageEngine ServiceDesk Plus msiexec.exe pip install で requirements ファイルをインストールするか、requests パッケージがインストールされていることを確認してください。 リバースシェルを取得しようとする場合は、最初にリスナーを実行してください。例: root@kitploit: nc -l 4444 次に、url と exe 引数を指定してエクスプロイトスクリプトを実行します。例: root@kitploit: python...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS脆弱性 情報 説明:ManageEngine ServiceDesk Plus バージョン 9.3 で XSS が発見されました 影響を受けるバージョン: 9.3 研究者: Dang The Tuyen 概念実証 この脆弱性は、URLのクエリ文字列におけるシングルクォートとセミコロンの混同に起因します。 ペイロード: ';alert'XSS';' 攻撃ベクター: http:///SearchN.do スクリーンショット...

CVE-2022-47966

CVE-2022-47966 CVE-2022-47966용 POC로, 다음 ManageEngine 제품에 영향을 미칩니다: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint Central MSP Endpoin...

CVE-2022-28219

CVE-2022-28219 针对受影响 build 版本低于 7060 的 ManageEngine ADAudit Plus 的 CVE-2022-28219 POC 技术分析 更多详情请参阅我们的博客： https://www.horizon3.ai/red-team-blog-cve-2022-28219 使用方法 root@kitploit: % python3 CVE-2022-28219.py -h usage: CVE-2022-28219.py -h -t TARGET -l LHOST -d DOMAIN -lhp HTTPPORT -lfp FTPPORT -f...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539：ADSelfService Plus RCE脆弱性 一：脆弱性の説明 ZOHO ManageEngine ADSelfService Plusは、ZOHO社のActive Directoryおよびクラウドアプリケーション向けの統合型セルフサービスパスワード管理およびシングルサインオンソリューションです。 CVE-2021-40539 Zoho ManageEngine ADSelfService Plus 6113 およびそれ以前のバージョンには、REST...

Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration

Zoho ManageEngine ADSelfService Plus 6121 is vulnerable to username enumeration CVE-2022-28987. The Forgot Password functionality responds differently for existing and non-existing users, allowing attackers to enumerate valid usernames. id: CVE-2022-28987 info: name: Zoho ManageEngine ADSelfServi...

Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting

Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on the loadframe page. id: CVE-2021-37416 info: name: Zoho ManageEngine ADSelfService Plus 6103 to mitigate this vulnerability. reference: -...

ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting

Multiple cross-site scripting vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting

ManageEngine ADSelfService Plus before 6121 contains a stored cross-site scripting vulnerability via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screens. id: CVE-2022-24681 info: name: ManageEngine ADSelfService Plus 6121 - Stored Cross-Site...

Zoho ManageEngine - getUserAPIKey Authentication Bypass

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 125657, 126002, 126104, and 126118 allow unauthenticated attackers to obtain a user's API key, and then access external...

ManageEngine Firewall Analyzer <8.0 - Local File Inclusion

ManageEngine Firewall Analyzer before 8.0 is vulnerable to local file inclusion. id: CVE-2015-7780 info: name: ManageEngine Firewall Analyzer 8.0 - Local File Inclusion author: daffainfo severity: medium description: ManageEngine Firewall Analyzer before 8.0 is vulnerable to local file inclusion...

Zoho ManageEngine - Internal Hostname Disclosure

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses. id: CVE-2022-23779 info: name: Zoho ManageEngine - Internal Hostname Disclosure author: cckuailong severity: medium...

CVE-2022-23779

CVE-2022-23779 CVE-2022-23779는 Zoho ManageEngine Desktop Central의 보안 취약점입니다. 소프트웨어가 승인되지 않은 사용자에게 내부 서버 정보를 유출하는 정보 노출 문제CWE-200로 분류됩니다. 10.1.2137.8 이전 버전이 영향을 받습니다 ::중간 심각도 익스플로잇 세부 사항 및 영향 HTTP 요청예: /themes이 리디렉션의 Location 헤더를 통해 호스트명을 노출할 수 있음을 보여주는 개념 증명 코드가 존재합니다. 내부 호스트명 유출 자체로는 시스템 장악이 가능하...

ManageEngine OpManager - Directory Traversal

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. id: CVE-2023-47211 info: name: ManageEngine...

Zoho ManageEngine OpManager < 12.5.329 - Remote Code Execution

Zoho ManageEngine OpManager before 12.5.329 contains a remote code execution caused by a general bypass in the deserialization class, letting unauthenticated attackers execute arbitrary code, exploit requires no authentication id: CVE-2021-3287 info: name: Zoho ManageEngine OpManager 12.5.329 -...

ManageEngine Password Manager Pro < Build 13235 SQLi (CVE-2026-14828)

According to its self-reported build number, the ManageEngine Password Manager Pro application running on the remote host is prior to build 13235. It is, therefore, affected by an authenticated SQL injection vulnerability. An authenticated, remote attacker can exploit this by crafting a malicious...

ManageEngine PAM360 < Build 8561 SQLi (CVE-2026-14828)

According to its self-reported build number, the ManageEngine PAM360 application running on the remote host is prior to build 8561. It is, therefore, affected by an authenticated SQL injection vulnerability. An authenticated, remote attacker can exploit this by crafting a malicious query to execu...