6460 matches found
ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection
Exploit Title: ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection Google Dork: intitle:"Applications Manager Login Screen" Date: 2020-07-23 Exploit Author: aldorm Vendor Homepage: https://www.manageengine.com/ Software Link: Version: 12 and 13 before Build 13200 Tested on:...
The vulnerability of the OAuth implementation in the Zoho ManageEngine ServiceDesk Plus system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the OAuth implementation in the Zoho ManageEngine ServiceDesk Plus IT service management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
Zoho ManageEngine Directory Traversal (CVE-2020-13818)
A directory traversal vulnerability exists in ManageEngine OpManager. This vulnerability is due to improper validation of user input in the request URI...
The vulnerability of the ManageEngine Desktop Central software for managing workstations via a web interface lies in the lack of restrictions on the download of files of unsanctioned types. This allows a malicious individual to download a specially created malicious ZIP file.
The vulnerability of the ManageEngine Desktop Central software for managing workstations via a web interface is related to the lack of restrictions on the download of files of non-safe types. Exploiting this vulnerability allows a malicious actor to download a specially created malicious ZIP file...
CVE-2020-14048
Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents...
Code injection
Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents...
CVE-2020-14048: Missing Authentication for Critical Function
Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents...
ZOHO ManageEngine ServiceDesk Plus Access Control Error Vulnerability
ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. An access control...
PT-2020-13863
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus versions prior to 11.1 build 11115 Description The issue allows remote unauthenticated attackers to change the installation status of deployed agents. Recommendations For versions prior to 11.1 build 11115,...
ManageEngine OpManager OpmSkipFilter Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of ManageEngine OpManager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpmSkipFilter class. The issue results from the lack of proper...
Zoho ManageEngine DataSecurity Plus Directory Traversal (CVE-2020-11531)
A directory traversal vulnerability exists in Zoho ManageEngine DataSecurity Plus. The vulnerability is due to lack of validation of the database schema name when handling a DR-SCHEMA-SYNC request in DataEngine Xnode Server application...
ZOHO ManageEngine OpManager Path Traversal Vulnerability
ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. A security vulnerability exists in ZOHO ManageEngine OpManager versions prior to 125144. An attacker could use this vulnerability to bypass directory traversal validation...
CVE-2020-13818
In Zoho ManageEngine OpManager before 125144, when is used, directory traversal validation can be bypassed...
Directory traversal
In Zoho ManageEngine OpManager before 125144, when is used, directory traversal validation can be bypassed...
CVE-2020-13818
Zoho ManageEngine OpManager is affected by CVE-2020-13818. A directory traversal vulnerability arises from improper validation of user input in the request URI, allowing remote attackers to disclose files. The issue is tied to the OpmSkipFilter component, and exploitation does not require authent...
CVE-2020-13818: Improper Limitation of a Pathname to a Restricted Directory
In Zoho ManageEngine OpManager before 125144, when is used, directory traversal validation can be bypassed...
PT-2020-13701
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 125144 Description The issue allows directory traversal validation to be bypassed when the cachestart parameter is used. This can lead to information disclosure. Recommendations For versions prior ...
Zoho ManageEngine DataSecurity Plus Authentication Bypass (CVE-2020-11532)
An authentication bypass vulnerability exists in Zoho ManageEngine DataSecurity Plus. The vulnerability is due to the presence of hardcoded default credentials for the Dataengine Xnode server component...
ZOHO ManageEngine ServiceDesk Plus Information Disclosure Vulnerability (CNVD-2021-25384)
ZOHO ManageEngine ServiceDesk Plus SDP is a web-based IT helpdesk software with integrated asset and project management capabilities, based on the ITIL framework. An information disclosure vulnerability exists in versions prior to ZOHO ManageEngine ServiceDesk Plus 11.1 build 11112. An attacker c...