CVE-2023-38743

CVE-2023-38743 ManageEngine ADManager: внедрение команд Ссылки: https://medium.com/@petrusviet/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe https://www.zerodayinitiative.com/advisories/ZDI-23-1488/...

CVE-2022-47966-Scan

CVE-2022-47966 Сканер О программе CVE-2022-47966 — это критическая уязвимость удаленного выполнения кода без аутентификации, затрагивающая как минимум 24 локальных продукта ManageEngine. Уязвимость применима только в том случае, если включен SAML SSO. Для некоторых продуктов она также применима,...

CVE-2019-12543

CVE-2019-12543 Zoho ManageEngine ServiceDesk Plus 9.3 XSS уязвимость в PurchaseRequest.do Информация Описание: Проблема была обнаружена в Zoho ManageEngine ServiceDesk Plus 9.3. Существует XSS через параметр serviceRequestId в PurchaseRequest.do. Автор: Concobe из Tarantula Team - VinCSS член...

CVE-2019-12542

CVE-2019-12542 XSS-уязвимость в Zoho ManageEngine ServiceDesk Plus 9.3 в SearchN.do Информация и описание: В Zoho ManageEngine ServiceDesk Plus 9.3 обнаружена проблема. Существует XSS-уязвимость через параметр userConfigID в SearchN.do. Автор: Concobe из Tarantula Team - VinCSS член Vingroup...

CVE-2022-23779

CVE-2022-23779 CVE-2022-23779 — это уязвимость безопасности в Zoho ManageEngine Desktop Central Она классифицируется как проблема раскрытия информации CWE-200, при которой программное обеспечение раскрывает внутреннюю информацию сервера неавторизованным пользователям. Уязвимы версии до 10.1.2137....

CVE-2021-31159

Zoho ManageEngine ServiceDesk Plus MSP - перечисление пользователей Active Directory CVE-2021-31159 Этот скрипт использует различия в выводе функциональности восстановления пароля в ServiceDesk Plus до сборки 10519: если пользователь существует, возвращается сообщение о том, что email был...

Zoho ManageEngine OpManger - Arbitrary File Read

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a specially crafted request. id: CVE-2020-12116 info: name: Zoho ManageEngine OpManger - Arbitrary File Read author:...

CVE-2026-12265

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

EUVD-2026-88237

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-12265

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to an insufficient access control flaw in the HA failover endpoint . This vulnerability allows an attacker to perform destructive PostgreSQL database operations , potentially leading to complete data destruction. The vulnerabil...

CVE-2026-12264

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

CVE-2026-12264 Authenticated File Write via HA Failover Config Upload leads to RCE

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

CVE-2026-12264 Authenticated File Write via HA Failover Config Upload leads to RCE

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

EUVD-2026-88226

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

CVE-2026-12264

Zohocorp ManageEngine DDI Central versions prior to 6201 are vulnerable to an Arbitrary file write flaw. This vulnerability occurs during the HA Failover Config sync upload process, which can be leveraged by an authenticated user to achieve remote code execution (RCE) . No specific exploit detail...

CVE-2026-12268

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...

CVE-2026-12269

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...

CVE-2026-12267

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution...