ManageEngine ADAudit Plus Path Traversal / XML Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine ADAudit Plus CVE-2022-28219', 'Description' = %q This module exploits CVE-2022-28219, which is a pair of vulnerabilities in...

ManageEngine ADAudit Plus Path Traversal / XML Injection Exploit

This Metasploit module exploits CVE-2022-28219, which is a pair of vulnerabilities in ManageEngine ADAudit Plus versions before build 7060. They include a path traversal in the /cewolf endpoint along with a blind XML external entity injection vulnerability to upload and execute a file. This modul...

Zoho ManageEngine ADAudit Plus Remote Code Execution (CVE-2022-28219)

A remote code execution vulnerability exists in Zoho ManageEngine ADAudit Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus

Code to support my CVE-2022-28219 analysishttps://attackerk...

ManageEngine ADAudit Plus CVE-2022-28219

This module exploits CVE-2022-28219, which is a pair of vulnerabilities in ManageEngine ADAudit Plus versions before build 7060: a path traversal in the /cewolf endpoint, and a blind XXE in, to upload and execute an executable file. Module Options msf use...

Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus

CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine A...

ManageEngine ADAudit Plus < Build 7060 XXE RCE

Binary data manageengineadauditplusCVE-2022-28219vcf.nbin...

CVE-2022-28219

creationtimestamp| type| source ---|---|--- 2022-04-05 22:29:00+00:00| seen| https://t.me/cibsecurity/40191 2022-06-30 04:59:54+00:00| published-proof-of-concept| https://t.me/MrVGunz/273 2022-06-30 07:00:05+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/52 2022-06-30...

CVE-2022-28219

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution...

CVE-2022-28219

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution...