ManageEngine ADAudit Plus XML External Entity

ManageEngine ADAudit Plus versions before 7060 suffer from an XML External Entity XXE vulnerability. A remote and unauthenticated attacker can leverage this vulnerability to upload a serialized Java Object on the target server and achieve Remote Code Execution by deserializing it through the...

CVE-2022-34829

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service application restart via a crafted payload to the Mobile App Deployment API...

CVE-2022-34829

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service application restart via a crafted payload to the Mobile App Deployment API...

CVE-2022-34829

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service application restart via a crafted payload to the Mobile App Deployment API...

Code injection

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service application restart via a crafted payload to the Mobile App Deployment API...

CVE-2022-34829

CVE-2022-34829 affects Zoho ManageEngine ADSelfService Plus (before 6203). A DoS can be triggered by a crafted payload to the Mobile App Deployment API, due to an input validation issue, leading to an application restart and partial availability impact. Public details across NVD/Red Hat/CNNVD ind...

CVE-2022-34829

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service application restart via a crafted payload to the Mobile App Deployment API...

PT-2022-22380

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 6203 Description The issue allows for a denial of service, resulting in an application restart, via a crafted payload sent to the "Mobile App Deployment API" endpoint. Recommendations For...

Zoho ManageEngine ADAudit Plus Remote Code Execution (CVE-2022-28219)

A remote code execution vulnerability exists in Zoho ManageEngine ADAudit Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2022-34829: Undefined Security Weakness

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service application restart via a crafted payload to the Mobile App Deployment API...

Zoho ManageEngine OPManager SQL Injection (CVE-2022-29535)

An SQL injection vulnerability exists in Zoho ManageEngine OPManager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2022-32551

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml...

CVE-2022-32551

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml...

ZOHO ManageEngine ServiceDesk Plus 路径遍历漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management IT Project Management, Procurement and Contract Management modules...

CVE-2022-32551

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml...

CVE-2022-32551

CVE-2022-32551 affects Zoho ManageEngine ServiceDesk Plus MSP prior to version 10604, enabling path traversal from sample/WEB-INF/web.xml or sample/META-INF/web.xml to WEB-INF/web.xml. This is a server-side directory traversal issue tied to the web.xml deployment paths, allowing access to sensiti...

Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus

Code to support my CVE-2022-28219 analysishttps://attackerk...

CVE-2022-32551: Improper Limitation of a Pathname to a Restricted Directory

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml...

PT-2022-21363

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus MSP versions prior to 10604 Description The issue allows path traversal, specifically to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml. Recommendations For versions prior to 10604,...

Vulnerability fixed in ManageEngine ADAudit Plus

ManageEngine has fixed a vulnerability in ADAudit Plus. A unauthenticated malicious person could exploit the vulnerability to execute arbitrary code on the system on which ADAudit Plus is installed. Horizon researchers have published a write-up and proof-of-concept code published. They indicate...