CVE-2013-6346

Cross-site request forgery CSRF vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

EUVD-2015-0796

Malware in sbrugna...

EUVD-2015-0795

Malware in sbrugna...

EUVD-2012-6200

Malware in sbrugna...

EUVD-2013-6170

Malware in sbrugna...

EUVD-2013-1134

Malware in sbrugna...

EUVD-2013-1133

Malware in sbrugna...

ZENworks Configuration Management 11.1 Shell Upload

ZENworks Configuration Management version 11.1 suffers from a remote shell upload vulnerability. ============================================================================================================================================= | Title : ZENworks Configuration Management 11.1 PHP Code...

ZENworks Configuration Management 11.1a Shell Upload

ZENworks Configuration Management version 11.1a suffers from a remote shell upload vulnerability. ============================================================================================================================================= | Title : ZENworks Configuration Management 11.1a PHP Cod...

Novell ZENworks Configuration Management Preboot Service Remote File Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Novell ZENworks Configuration Management Preboot Service Remote File Access', 'Description' = %q This module exploits a directory traversal in th...

CVE-2023-6400

Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management ZCM allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management ZCM versions: 2020 update 3, 23.3, and 23.4...

CVE-2023-6400

CVE-2023-6400 concerns an incorrect authorization vulnerability in OpenText ZENworks Configuration Management (ZCM). Affected are ZCM versions: 2020 update 3, 23.3, and 23.4. The root cause is improper authorization checks, enabling unauthorized use of device resources. Practical impact is high (...

CVE-2023-6400 Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.

Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management ZCM allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management ZCM versions: 2020 update 3, 23.3, and 23.4...

CVE-2023-6400: Incorrect Authorization

Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management ZCM allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management ZCM versions: 2020 update 3, 23.3, and 23.4...

SUSE CVE-2013-3706

Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management ZCM 11.2 allows remote attackers to read arbitrary files via a .. dot dot in a preboot update pathname, aka ZDI-CAN-1595...

PT-2021-15122

Name of the Vulnerable Software and Affected Versions Micro Focus ZENworks Configuration Management versions prior to 2020 Update 1 Description A privileged escalation issue has been identified, which could be exploited to gain unauthorized system privileges. Recommendations For versions prior to...

Micro Focus ZENworks Configuration Management 权限许可和访问控制问题漏洞

Micro Focus ZENworks Configuration Management is an endpoint device management software from Micro Focus UK that provides a single management platform for all of a user's endpoint devices, reducing costs and improving IT. A vulnerability in Micro Focus ZENworks Configuration Management with...

CVE-2021-22521: Incorrect Authorization

A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges...

PT-2020-7287

Name of the Vulnerable Software and Affected Versions: Novell ZENworks Configuration Management versions prior to 11.2.4 Description: The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them t...

PT-2020-7288

Name of the Vulnerable Software and Affected Versions: Novell ZENworks Configuration Management versions prior to 11.2.4 Description: The issue allows obtaining sensitive trace information. Recommendations: For versions prior to 11.2.4, update to version 11.2.4 or later to resolve the issue...