5168 matches found
Multiple Critical Flaws Found in Zoho’s ManageEngine
Researchers have found multiple critical flaws in the IT help desk software ManageEngine, made by Zoho Corp. In all, seven vulnerabilities were discovered, each allowing an attacker to ultimately take control of host servers running ManageEngine’s SaaS suite of applications. According to...
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)
Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine EventLog Analyzer Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 05/11/2014 / Last...
ManageEngine Desktop Central - Create Administrator Vulnerability
Exploit for multiple platform in category web applications Administrator account creation in ManageEngine Desktop Central / Desktop Central MSP Discovered by Pedro Ribeiro email protected, Agile Information Security =================================================================================...
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure:...
ManageEngine OpManager / Applications Manager / IT360 -FailOverServlet Multiple Vulnerability
Exploit for multiple platform in category web applications Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security...
ManageEngine Netflow Analyzer / IT360 - Arbitrary File Download Vulnerability
Exploit for multiple platform in category web applications Arbitrary file download in ManageEngine Netflow Analyzer and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 30/11/2014 /...
CVE-2014-7862
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action...
Deserialization of untrusted data
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action...
CVE-2014-7862
CVE-2014-7862 affects ManageEngine Desktop Central/Desktop Central MSP via the DCPluginServelet; unauthenticated remote attackers can create administrator accounts using addPlugInUser, with pre-90109 builds vulnerable. Public PoC/exploit references exist (Exploit-DB 43892; Rapid7 Metasploit modul...
CVE-2014-7862
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action...
ManageEngine ServiceDesk DownloadFileServlet Information Disclosure (CVE-2017-11511)
An information disclosure vulnerability exists within ManageEngine ServiceDesk for Microsoft Windows. The vulnerability is due to the way ServiceDesk handles download requests. A successful attack could lead to stolen system information...
ManageEngine Password Manager Pro Multiple XSS Vulnerabilities (Dec 2017)
ManageEngine Password Manager Pro is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
CVE-2017-17698
Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...
Cross site scripting
Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...
CVE-2017-17698
CVE-2017-17698 affects Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400). The issue is a reflected Cross‑Site Scripting (XSS) vulnerability in two files, SearchResult.ec and BulkAccessControlView.ec, as described in multiple sources. The vulnerability arises from improper handling of inp...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37247)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37182)
ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in ZOHO ManageEngine Applications Manager version 13. The vulnerability can be exploited by a remote attacker to inject SQL statements using the 'widgetid' paramet...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37180)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37248)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
