482 matches found
CVE-2022-23779
CVE-2022-23779：内部主机名泄露漏洞 信息 描述： Zoho ManageEngine Desktop Central 10.1.2137.8 之前的版本会将已安装的服务器名称暴露给任何人。通过读取 HTTP 重定向响应，可以获取内部主机名。 受影响版本： 10.1.2137.7 研究人员： Matthew Zellner @fbusr 披露链接： https://www.manageengine.com/products/desktop-central/cve-2022-23779.html NIST CVE 链接：...
CVE-2022-23779
CVE-2022-23779 CVE-2022-23779は、Zoho ManageEngine Desktop Centralのセキュリティ脆弱性です。 これは情報漏洩の問題（CWE-200）に分類され、ソフトウェアが内部サーバー情報を許可されていないユーザーに漏洩します。 バージョン10.1.2137.8以前が影響を受けます ::中程度の深刻度 悪用の詳細と影響 概念実証コードは、HTTPリクエスト（例: /themes へのリクエスト）がリダイレクトのLocationヘッダーを介してホスト名を漏洩する方法を示しています。...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Zohocorp Manageengine_Desktop_Central
CVE-2022-23779 CVE-2022-23779 is a security vulnerability in Z...
CVE-2021-28960
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations...
CVE-2022-23779
Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses...
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
CVE-2020-24397
An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM...
EUVD-2020-20540
Malware in sbrugna...
EUVD-2018-8630
Malware in sbrugna...
EUVD-2018-5354
Malware in sbrugna...
EUVD-2019-7440
Malware in sbrugna...
EUVD-2018-17120
Malware in sbrugna...
EUVD-2017-8094
Malware in sbrugna...
EUVD-2018-17118
Malware in sbrugna...
EUVD-2020-3265
Malware in sbrugna...
EUVD-2023-54616
Malicious code in bioql PyPI...
EUVD-2021-32866
Malicious code in bioql PyPI...
EUVD-2021-32865
Malicious code in bioql PyPI...