Zoho ManageEngine ServiceDesk Plus - Remote Code Execution

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. id: CVE-2021-44077 info: name: Zoho ManageEngine ServiceDesk Plus - Remote Code Execution author: Adam Crosser,gy741...

CVE-2022-47966_checker

CVE-2022-47966checker Quick and dirty powershell script to look for ManageEngine CVE-2022-47966 IOCs. The script will parse requests in ME HTTP access logs. If a characteristic SAML request is found, it will attempt to decode and extract the attacker's payload. Findings are written to...

Golang-CVE-2021-44077-POC

Golang-CVE-2021-44077-POC This exploit is an unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus msiexec.exe Then, run the exploit. go run CVE-2021-44077.go -u "http://192.168.1.3:8080/" -f "/msiexec.exe" -u is the vulnerable URL -f is your malicious file...

CVE-2019-12541

CVE-2019-12541 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SolutionSearch.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. Author: Concobe of Tarantula Team - VinCSS a member...

ManageEngine ServiceDesk RCE (CVE-2021-44077)

Exploits CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus: unauthenticated zip upload to /RestAPI/ImportTechnicians achieves path traversal and RCE. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus ImportTechnicians RCE CVE-2021-44077.""" import io import zipfile fro...

ManageEngine SDP - FileDownload.jsp fName File Read

Reads arbitrary files via ManageEngine ServiceDesk Plus FileDownload.jsp fName path traversal with null-byte truncation. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus FileDownload.jsp fName file read.""" from urllib.parse import quote from kittysploit import from...

ManageEngine SDP - FileDownload.jsp Path Traversal Detection

Detects ManageEngine ServiceDesk Plus FileDownload.jsp fName path traversal to /etc/passwd via null-byte truncation. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus FileDownload.jsp path traversal.""" import re from kittysploit import from lib.protocols.http.httpclient...

Zoho ManageEngine ServiceDesk Plus - Remote Code Execution Detection

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP befor...

ZOHO ManageEngine ServiceDesk Panel - Detect

ZOHO ManageEngine ServiceDesk panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine ServiceDesk panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

CVE-2019-12541

An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter...

EUVD-2011-2732

Malware in sbrugna...

EUVD-2008-1306

Malware in sbrugna...

EUVD-2011-2731

Malware in sbrugna...

EUVD-2011-1511

Malware in sbrugna...

EUVD-2016-5866

Malware in sbrugna...

EUVD-2017-18297

Malware in sbrugna...

EUVD-2017-18311

Malware in sbrugna...

EUVD-2016-5865

Malware in sbrugna...

EUVD-2011-2730

Malware in sbrugna...

EUVD-2012-2571

Malware in sbrugna...