EUVD-2015-5415

Malware in sbrugna...

EUVD-2014-3928

Malware in sbrugna...

EUVD-2017-8855

Malware in sbrugna...

EUVD-2016-2263

Malware in sbrugna...

EUVD-2021-18732

Malware in sbrugna...

EUVD-2020-19959

Malware in sbrugna...

EUVD-2014-8335

Malware in sbrugna...

EUVD-2009-4355

Malware in sbrugna...

EUVD-2016-2265

Malware in sbrugna...

EUVD-2014-9194

Malware in sbrugna...

EUVD-2023-33797

Malicious code in bioql PyPI...

EUVD-2022-38294

Malicious code in bioql PyPI...

CVE-2023-2291

Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus AMP build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360. These credentials could allow a malicious actor to modify configuration data that would escalate their permissions from that of a...

CVE-2022-43672

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection in a different software component relative to CVE-2022-43671...

CVE-2022-40300

Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities...

CVE-2020-9346

Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery CSRF attacks, as demonstrated by changing a user's role...

CVE-2017-17698

Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...

ManageEngine Password Manager SQLAdvancedALSearchResult.cc Pro SQL Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine Password Manager SQLAdvancedALSearchResult.cc Pro SQL Injection', 'Description' = %q ManageEngine Password Manager Pro PMP has an...

ManageEngine Password Manager Pro < 12.4 Build 12431 SQLi

The remote host is running a version of ManageEngine Password Manager Pro prior to 12.4 Build 12431. It is, therefore, affected by a SQL injection vulnerability. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the...

CVE-2024-5546

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option...