6494 matches found
CVE-2021-44077
CVE-2021-44077 Proof of Concept Exploit for CVE-2021-44077: PreAuth RCE in ManageEngine ServiceDesk Plus msiexec.exe pip install the requirements file or make sure you've got the requests package. If you're trying to catch a reverse shell, run your listener first, e.g. nc -l 4444 Then run the...
CVE-2022-28219
CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine ADAudit Plus builds -l -d -f /windows/win.ini Or to run calc.exe on the target: python3 CVE-2022-28219.py -t targe...
manageengine-auditad-cve-2022-28219
Code to support my CVE-2022-28219 analysis. To execute, with Ruby and Rubygems installed: gem install httparty ruby ./manageengine-poc.rb This is designed as a proof of concept, not a stable exploit. It only runs calc. :...
CVE-2026-11374-check
CVE-2026-11374 ManageEngine AD360 Precondition Detection Script A detection script for the exploit precondition of CVE-2026-11374, a predictable SSO-ticket flaw that leads to unauthenticated account takeover across the ManageEngine AD360 suite. The four in-scope products share the...
CVE-2020-35682
CVE-2020-35682 SD-91948: CVE-2020-35682: Authentication Bypass Vulnerability during SAML login in ServiceDesk Plus. As described by ManageEngine. If the target ServiceDesk Plus 11134 installation has SAML login enabled and you have credentials to a low privilege user then you can escalate to...
CVE-2019-12543
CVE-2019-12543 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in PurchaseRequest.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceRequestId parameter. Author: Concobe of Tarantula Team - VinCSS ...
Golang-CVE-2021-44077-POC
Golang-CVE-2021-44077-POC This exploit is an unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus msiexec.exe Then, run the exploit. go run CVE-2021-44077.go -u "http://192.168.1.3:8080/" -f "/msiexec.exe" -u is the vulnerable URL -f is your malicious file...
CVE-2022-47966-Scan
CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...
CVE-2023-38743
CVE-2023-38743 ManageEngine ADManager Command Injection Ref: https://medium.com/@petrusviet/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe https://www.zerodayinitiative.com/advisories/ZDI-23-1488/...
ADSelfService-Plus-RCE-CVE-2021-40539
ADSelfService-Plus-RCE-CVE-2021-40539 ADSelfService Plus RCE Vulnerability Detection Tool Fork Description ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. Network Mapping...
CVE-2023-29084
CVE-2023-29084 Command injection in ManageEngine ADManager Plus Poc POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...
CVE-2022-35405
CVE-2022-35405 My blog post Nuclei template Other article ManageEngine PAM360 and Password Manager Pro unauthenticated remote code execution vulnerability PoC Access Manager Plus authenticated only : Product Name| Affected Versions| Default port ---|---|--- PAM360| 5.5 5500 and below| 8282 Passwo...
CVE-2022-47966
CVE-2022-47966 POC for CVE-2022-47966 affecting the following ManageEngine products: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint...
CVE-2020-10189-ManageEngine
This repository does not have a README...
CVE-2021-31159
Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration CVE-2021-31159 This script takes advantage of ServiceDesk Plus before build 10519 having different output in the password recovery functionality: if the user exists it returns a message claiming an email has been sent but ...
CVE-2019-12189
CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...
cve-2020-14008
CVE-2020-14008 ManageEngine Exploit What is this? This script exploits CVE-2020-14008 in ManageEngine Applications Manager to get a reverse shell with SYSTEM privileges. Requirements pip3 install requests urllib3 How to use it 1. Start a listener nc -nlvp 9001 2. Run the exploit python3...
CVE-2022-47966_checker
CVE-2022-47966checker Quick and dirty powershell script to look for ManageEngine CVE-2022-47966 IOCs. The script will parse requests in ME HTTP access logs. If a characteristic SAML request is found, it will attempt to decode and extract the attacker's payload. Findings are written to...
CVE-2019-10008
CVE-2019-10008 ManageEngine Service Desk Plus 9.3 Privilaged account Hijacking Date: 30-03-2019 Exploit Author: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Vendor Homepage:www.manageengine.com Product: Service Desk Plus Version: 10.0 Tested On: Windows 10 64 bit CVE : 2019-10008 Complete P...