PT-2025-53542

Уязвимость программного средства для службы ИТ-поддержки Zoho ManageEngine Applications Manager связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды...

EUVD-2018-5000

Malware in sbrugna...

EUVD-2019-3142

Malware in sbrugna...

EUVD-2017-3172

Malware in sbrugna...

EUVD-2023-33011

Malicious code in bioql PyPI...

CVE-2021-35512

An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...

CVE-2020-24743

An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...

CVE-2023-38333: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...

CVE-2023-29442: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

Cross site scripting

Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...

CVE-2023-28340: Improper Restriction of XML External Entity Reference

Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...

CVE-2023-28341: Improper Neutralization of Input During Web Page Generation

Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...

PT-2022-8906

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions prior to build 14550 Description A vulnerability in the showReports module allows authenticated attackers to execute a SQL injection via a crafted request. Recommendations For versions prior to...

CVE-2020-28679: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request...

CVE-2020-24743

An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...

PT-2021-11071

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions up to 14550 Description: An issue was found in the "/showReports.do" endpoint of Zoho ManageEngine Applications Manager, allowing attackers to gain escalated privileges via the resourceid...

CVE-2020-24743: Undefined Security Weakness

An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...

Server side request forgery (ssrf)

An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...

CVE-2021-35512

CVE-2021-35512 describes a Server-Side Request Forgery (SSRF) in Zoho ManageEngine Applications Manager build 15200. The connected documents confirm the component is affected, but do not provide further technical details, exploit specifics, or remediation. The exact root cause, impact scope, and ...

PT-2021-20948

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager version 15200 Description: A Server-Side Request Forgery SSRF issue was discovered. SSRF is a type of security vulnerability that allows an attacker to manipulate a server into making unauthorized...