35 matches found
ZOHO ManageEngine AssetExplorer Panel - Detect
ZOHO ManageEngine AssetExplorer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine AssetExplorer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...
CVE-2019-12595
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter...
EUVD-2019-5843
Malware in sbrugna...
EUVD-2019-4132
Malware in sbrugna...
CVE-2020-8838
An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an...
CVE-2023-29443: Improper Restriction of XML External Entity Reference
Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...
CVE-2020-8838
An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an...
CVE-2020-8838: Improper Validation of Integrity Check Value
An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an...
PT-2020-20315 · Zoho +1 · Zoho Manageengine Assetexplorer +1
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine AssetExplorer version 6.5 Description: An issue was discovered in Zoho ManageEngine AssetExplorer during an upgrade of the Windows agent, where it does not validate the source and binary downloaded. This allows an attacker o...
CVE-2019-12994
Server Side Request Forgery SSRF exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL...
Server side request forgery (ssrf)
Server Side Request Forgery SSRF exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter...
CVE-2019-12959
The CVE-2019-12959 entry concerns Zoho ManageEngine AssetExplorer, where a Server Side Request Forgery (SSRF) exists in the ClientUtilServlet via a URL parameter. Multiple connected sources confirm the affected product as AssetExplorer 6.2.0 and earlier, with the SSRF vulnerability intrinsic to t...
CVE-2019-12994
CVE-2019-12994 describes a Server-Side Request Forgery (SSRF) in Zoho ManageEngine AssetExplorer version 6.2.0 , affecting the AJaxServlet via a URL parameter. The connected Red Hat and other entries corroborate the flaw but do not provide additional technical specifics (e.g., impacted builds bey...
CVE-2019-12994: Server-Side Request Forgery (SSRF)
Server Side Request Forgery SSRF exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL...
CVE-2019-14693: Improper Restriction of XML External Entity Reference
Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
CVE-2019-12959: Server-Side Request Forgery (SSRF)
Server Side Request Forgery SSRF exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter...
PT-2019-13052
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine AssetExplorer versions 6.2.0 and earlier Description A Server Side Request Forgery SSRF issue exists in the ClientUtilServlet servlet. This is due to a URL in a parameter that can be manipulated. Recommendations For versions...
PT-2019-13787
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine AssetExplorer version 6.2.0 Description The issue allows a remote attacker to exploit an XML External Entity Injection XXE vulnerability when processing license XML data, potentially exposing sensitive information or consumin...
PT-2019-13075
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine AssetExplorer version 6.2.0 Description A Server Side Request Forgery SSRF issue exists, allowing exploitation via a parameter in a URL for the AJaxServlet servlet. Recommendations For Zoho ManageEngine AssetExplorer version...
