CVE-2025-9435

CVE-2025-9435 affects Zohocorp/ManageEngine ADManager Plus: versions below 7230 are vulnerable to a Path Traversal in the User Management module. The connected sources confirm the affected product and issue, with a CVSS v3.1 base score of 5.5 (Network attack vector, Low access complexity, privile...

CVE-2025-9435 Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

Sandboxie-Plus 代码问题漏洞

Sandboxie-Plus is a sandboxing isolation software from Sandboxie-Plus. A code issue vulnerability exists in Sandboxie-Plus version 5.50.2, which stems from the presence of unquoted service paths to the Windows service SpieSvc, which could lead to the execution of arbitrary code by a local attacke...

Zoho ManageEngine ADSelfService Plus 安全漏洞

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A security vulnerability exists in Zoho ManageEngine ADSelfService Plus prior to version 6519, which stems from a filter...

CVE-2022-50920: Unquoted Search Path or Element

Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges durin...

CVE-2025-11250: Authentication Bypass by Spoofing

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations...

ZOHO多款产品 安全漏洞

ZOHO Password Manager Pro PMP and so on are products of ZOHO USA company.ZOHO Password Manager Pro is a password manager.ZOHO ManageEngine Access Manager Plus is the ZOHO ManageEngine PAM360 is a complete PAM software. A security vulnerability exists in several ZOHO products, which stems from an...

Explorer32++ 安全漏洞

Explorer32++ is an application of Explorer32++ open source. A security vulnerability exists in Explorer32++ version 1.3.5.531, which stems from a buffer overflow in a structured exception handling record that could lead to the execution of arbitrary code...

Zoho ManageEngine ADManager Plus 安全漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...

PT-2026-2625

CVE-2025-9435 Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module https://t.co/X5Q8U1d7zf...

CVE-2025-9435: Improper Limitation of a Pathname to a Restricted Directory

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

PT-2026-2436

Name of the Vulnerable Software and Affected Versions ManageEngine PAM360 versions prior to 8202 Password Manager Pro versions prior to 13221 Access Manager Plus versions prior to 4401 Description The software is subject to an authorization issue within the initiate remote session functionality...

CVE-2025-11669: Missing Authorization

Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality...

PT-2026-2435

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to 6519 Description ManageEngine ADSelfService Plus versions before 6519 are susceptible to an authentication bypass due to improper filter configurations. This allows unauthorized access. The iss...

UBUNTU-CVE-2026-22776

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.1, a Denial of Service DoS vulnerability exists in cpp-httplib due to the unsafe handling of compressed HTTP request bodies Content-Encoding: gzip, br, etc.. The library validates the...

CVE-2026-22776 cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.1, a Denial of Service DoS vulnerability exists in cpp-httplib due to the unsafe handling of compressed HTTP request bodies Content-Encoding: gzip, br, etc.. The library validates the...

EUVD-2026-1953

Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information...

CVE-2026-0853

CVE-2026-0853 affects certain NVR models from A-Plus Video Technologies. The underlying issue is a Sensitive Data Exposure that can be exploited by unauthenticated remote attackers to access the device’s debug page and retrieve device status information. Impact is described as exposure of status ...

A-Plus Video多款产品 安全漏洞

The A-Plus Video AP-RM864P, among others, is a network video recorder from A-Plus Video of Taiwan, China. A security vulnerability exists in a number of A-Plus Video products. The vulnerability stems from sensitive data leakage and could allow an unauthenticated, remote attacker to access debug...

CVE-2026-0853: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information...