Invoice & Time Tracking - Zoho - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Invoice & Time Tracking - Zoho published at the 'play' market has multiple vulnerabilities...

ZOHO ManageEngine EventLog Analyzer elevation of privilege vulnerability (CNVD-2016-02408)

ZOHO ManageEngine EventLog Analyzer is a set of system, event log analysis software. A security vulnerability exists in ZOHO ManageEngine EventLog Analyzer that could be exploited by an attacker to elevate privileges and perform unauthorized operations...

ManageEngine Password Manager Pro 8102 to 8302 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications Systems Affected Product : ManageEngine Password Manager Pro Company : ZOHO Corp. Build Number : 8.1 to 8.3 and probably earlier versions Affected Versions : 8102 to 8302 and probably earlier versions Product Description Password Manager Pro i...

ManageEngine Password Manager Pro 8102 to 8302 - Multiple Vulnerabilities

Systems Affected Product : ManageEngine Password Manager Pro Company : ZOHO Corp. Build Number : 8.1 to 8.3 and probably earlier versions Affected Versions : 8102 to 8302 and probably earlier versions Product Description Password Manager Pro is a secure vault for storing and managing shared...

ManageEngine Password Manager Pro 8.3 CSRF / XSS / Escalation / Bypass

Systems Affected Product : ManageEngine Password Manager Pro Company : ZOHO Corp. Build Number : 8.1 to 8.3 and probably earlier versions Affected Versions : 8102 to 8302 and probably earlier versions Product Description Password Manager Pro is a secure vault for storing and managing shared...

zoho.com XSS vulnerability

Vulnerable URL: http://www.zoho.com/crm/blog?xwx'onmouseover=promptString.fromCharCode88,83,83,80,79,83,69,68 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 16:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

ManageEngine Firewall Analyzer 8.5 SP-5.0 Cross Site Scripting

ManageEngine Firewall Analyzer 8.5 SP-5.0 Multiple XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 8.5 SP-5.0 Build 8500 Summary: ManageEngine Firewall Analyzer is an agent-less log analytics and configuration management...

ZOHO ManageEngine Network Configuration Manager Elevation of Privilege Vulnerability

ZOHO ManageEngine Network Configuration Manager is a suite of Network Configuration Management, Network Change and Configuration Management NCCM software for configuring switches, routers, firewalls and other network devices. A security vulnerability in ZOHO ManageEngine Network Configuration...

ManageEngine Firewall Analyzer 8.5 SP-5.0 Multiple XSS Vulnerabilities

Summary ManageEngine Firewall Analyzer is an agent-less log analytics and configuration management software that helps network administrators to centrally collect, archive, analyze their security device logs and generate forensic reports out of it. Description Firewall Analyzer suffers from...

Manage Engine OPutils 8.0 Privilege Escalation

================================================== Privilege escalation Vulnerability in ManageEngine oputils ================================================== . contents:: Table Of Content Overview ======== Title:- Privilege escalation Vulnerability in ManageEngine oputils Author: Kaustubh G...

ManageEngine Network Configuration Management Build 11000 - Privilege Escalation

ManageEngine Network Configuration Management Build 11000 - Privilege Escalation =================================================================================== Privilege escalation Vulnerability in ManageEngine Network Configuration Management...

ManageEngine OPutils 8.0 - Multiple Vulnerabilities

ManageEngine OPutils 8.0 - Multiple Vulnerabilities =================================================================================== Privilege escalation Vulnerability in ManageEngine oputils =================================================================================== Overview ========...

ManageEngine Network Configuration Management Build 11000 - Privilege Escalation

Exploit for multiple platform in category web applications =================================================================================== Privilege escalation Vulnerability in ManageEngine Network Configuration Management...

ManageEngine OPutils 8.0 - Multiple Vulnerabilities

=================================================================================== Privilege escalation Vulnerability in ManageEngine oputils =================================================================================== Overview ======== Title:- Privilege escalation Vulnerability in...

ManageEngine Network Configuration Management Build 11000 Privilege Escalation

=================================================================================== Privilege escalation Vulnerability in ManageEngine Network Configuration Management =================================================================================== . contents:: Table Of Content Overview ======...

ZOHO ManageEngine EventLog Analyzer Elevation of Privilege Vulnerability

ZOHO ManageEngine EventLog Analyzer is a set of system, event log analysis software. A security vulnerability exists in ZOHO ManageEngine EventLog Analyzer that could be exploited by an attacker to elevate privileges and perform unauthorized operations...

Manage Engine Network Configuration Manager Build 11000 - Cross-Site Request Forgery

Exploit for multiple platform in category web applications ========================================================================================= Cross-Site Request Forgery Vulnerability in ManageEngine Network Configuration Management...

Manage Engine Network Configuration Manager Build 11000 - Cross-Site Request Forgery

========================================================================================= Cross-Site Request Forgery Vulnerability in ManageEngine Network Configuration Management ========================================================================================= .. contents:: Table Of...

ManageEngine Network Configuration Management Build 11000 CSRF

Title:- Cross-Site Request Forgery CSRF Vulnerability in ManageEngine Network Configuration Management Author: Kaustubh G. Padwad Vendor: ZOHO Corp Product: ManageEngine Network Configuration Manager Tested Version: : Network Configuration Manager Build 11000 Severity: HIGH About the Product:...

ManageEngine Application Manager 12.5 Command Execution

!C:/Python27/python.exe -u Applications Manager 12.5 Arbitrary Command Execution Exploit Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.5 Summary: ManageEngine Applications Manager is an application performance monitoring solution that...