ZOHO ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus is a file upload vulnerability that can be exploited by attackers to cause remote code execution...

ManageEngine ADManager Plus Detection Consolidation

Consolidation of ManageEngine ADManager Plus detections. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

ManageEngine Log360 Detection

Binary data manageenginelog360detect.nbin...

ZOHO ManageEngine ADManager Plus Licensing Issue Vulnerability

ZOHO ManageEngine ADManager Plus is an Active Directory AD management and reporting solution from Zoho, Inc. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to an authorization issue that could be exploited by an attacker to take over an account via SSO...

ManageEngine Log360 < Build 5229 REST API Restriction Bypass RCE

Binary data manageenginelog360cve-2021-40539.nbin...

CVE-2021-37927

Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...

CVE-2021-37927

Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...

CVE-2021-37925

Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability...

Command injection

Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability...

CVE-2021-37927

Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...

CVE-2021-37927

CVE-2021-37927 affects Zoho ManageEngine ADManager Plus

CVE-2021-37925

CVE-2021-37925 affects Zoho ManageEngine ADManager Plus, versions 7110 and earlier. The issue is a Post-Auth OS command injection vulnerability, with Red Hat, NVD, PRION, CVE lists and CNNVD entries corroborating the description. The CVSS calculations indicate a high-impact, critical exposure: CV...

Zoho ManageEngine ADSelfService Plus server-side request forgery vulnerability (CNVD-2021-88244)

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A server-side request forgery vulnerability exists in Zoho ManageEngin...

Zoho Corporation ADManager Plus 数据伪造问题漏洞

ZOHO ManageEngine ADManager Plus is an Active Directory AD management and reporting solution from Zoho, Inc. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to an authorization issue that could be exploited by an attacker to take over an account via SSO...

Zoho ManageEngine ADSelfService Plus Domain User Account Takeover Vulnerability

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A domain user account takeover vulnerability exists in Zoho ManageEngi...

Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability (CNVD-2021-88247)

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus prior to version 7111, which can be exploited by an attacker to execute code...

Zoho ManageEngine ADSelfService Plus Email Spoofing Vulnerability

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An email spoofing vulnerability exists in Zoho ManageEngine...

Zoho ManageEngine Desktop Central Remote Code Execution Vulnerability (CNVD-2021-88243)

Zoho ManageEngine Desktop Central is integrated desktop and mobile device management software that helps manage servers, laptops, desktops, smartphones and tablets from a central location. A remote code execution vulnerability exists in Zoho ManageEngine Desktop Central versions prior to 10.0.683...

Vulnerabilities fixed in Zoho ManageEngine ADManager Plus Pro

Vulnerabilities have been fixed in ManageEngine ADManager Plus Pro. The vulnerabilities allow a malicious person to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Circumvention of security measure Remote code execution User rights Increased...

ZOHO ManageEngine ADManager Plus 操作系统命令注入漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...