101 matches found
PT-2025-53542
Уязвимость программного средства для службы ИТ-поддержки Zoho ManageEngine Applications Manager связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды...
EUVD-2017-3172
Malware in sbrugna...
EUVD-2019-3142
Malware in sbrugna...
EUVD-2018-5000
Malware in sbrugna...
EUVD-2023-33011
Malicious code in bioql PyPI...
CVE-2021-35512
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...
CVE-2020-24743
An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...
CVE-2023-38333: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...
CVE-2023-29442: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...
Cross site scripting
Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...
CVE-2023-28341: Improper Neutralization of Input During Web Page Generation
Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...
CVE-2023-28340: Improper Restriction of XML External Entity Reference
Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...
PT-2022-8906
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions prior to build 14550 Description A vulnerability in the showReports module allows authenticated attackers to execute a SQL injection via a crafted request. Recommendations For versions prior to...
CVE-2020-28679: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request...
CVE-2020-24743
An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...
PT-2021-11071
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions up to 14550 Description: An issue was found in the "/showReports.do" endpoint of Zoho ManageEngine Applications Manager, allowing attackers to gain escalated privileges via the resourceid...
CVE-2020-24743: Undefined Security Weakness
An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...
Server side request forgery (ssrf)
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...
CVE-2021-35512
CVE-2021-35512 describes a Server-Side Request Forgery (SSRF) in Zoho ManageEngine Applications Manager build 15200. The connected documents confirm the component is affected, but do not provide further technical details, exploit specifics, or remediation. The exact root cause, impact scope, and ...