25 matches found
EUVD-2010-5014
Malware in sbrugna...
CVE-2022-48362
Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. The attacker could authenticate ...
Backdoor.Win32.Agent.aegg Hardcoded Credential
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/58be35e792476d1c015df7853112d200.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.aegg Vulnerability: Weak Hardcoded Credentials Description: The malware listens...
CVE-2022-29589
Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...
CVE-2022-29589
Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...
Design/Logic Flaw
Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...
CVE-2022-29589
CVE-2022-29589 affects Crypt Server prior to version 3.3.0. The issue is an XSS in the index view related to serial, computername, and username fields. The underlying cause is not detailed in the provided documents beyond this linkage. Public references indicate the fix was released in version 3....
CVE-2022-29589
Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...
CVE-2022-29589
Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...
CVE-2022-29589: Improper Neutralization of Input During Web Page Generation
Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...
PT-2022-19712
Name of the Vulnerable Software and Affected Versions Crypt Server versions prior to 3.3.0 Description The issue allows for XSS in the index view, related to serial, computername, and username. Recommendations For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue. As ...
PT-2022-6384
Name of the Vulnerable Software and Affected Versions ManageEngine Desktop Central versions prior to 10.1.2137.2 ManageEngine Endpoint Central MSP versions prior to 10.1.2137.2 Description The issue is related to the AgentLogUploadServlet component in ManageEngine Desktop Central and ManageEngine...
CVE-2018-12999: Improper Input Validation
Incorrect Access Control in AgentTrayIconServlet in Zoho ManageEngine Desktop Central 10.0.255 allows attackers to delete certain files on the web server without login by sending a specially crafted request to the server with a computerName=../ substring to the /agenttrayicon URI...
PT-2018-11528
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central version 10.0.255 Description The issue allows attackers to delete certain files on the web server without login by sending a specially crafted request to the server. This is achieved by including a...
Dexter (CasinoLoader) Panel - SQL Injection Exploit
Exploit for multiple platform in category web applications import pycurl import urllib import cStringIO import base64 import argparse import sys import string import pygeoip version = "0.1-httpbots-PoC" def PrintHelp: global version print "usage: dexter.PoC.py -h action gateway url" print "" prin...
LAN.FS Messenger 2.4 - Command Execution
Title: ====== LAN.FS Messenger v2.4 - Command Execution Vulnerability Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 760 Common Vulnerability Scoring System: ==================================== 8.2 Introduction: =============...
Cross site scripting
Cross-site scripting XSS vulnerability in jsp/admin/tools/remoteshare.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2010-5050
Cross-site scripting XSS vulnerability in jsp/admin/tools/remoteshare.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
PT-2011-1985
Name of the Vulnerable Software and Affected Versions ManageEngine ADManager Plus version 4.4.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the computerName parameter in the "jsp/admin/tools/remote share.jsp" endpoint...
CVE-2010-5050: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in jsp/admin/tools/remoteshare.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...