ManageEngine Desktop Central - FileUploadServlet Detection (CVE-2015-8249)

Detects CVE-2015-8249 by uploading a JSP via FileUploadServlet connectionId path traversal into jspf/ and verifying execution. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine Desktop Central FileUploadServlet path traversal CVE-2015-8249.""" from kittysploit import from...

ManageEngine SDP - FileDownload.jsp Path Traversal Detection

Detects ManageEngine ServiceDesk Plus FileDownload.jsp fName path traversal to /etc/passwd via null-byte truncation. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus FileDownload.jsp path traversal.""" import re from kittysploit import from lib.protocols.http.httpclient...

ManageEngine SDP - FILENAME Traversal Detection (CVE-2011-2757)

Detects CVE-2011-2757 via FileDownload.jsp?module=agent&FILENAME=../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-2757 via FileDownload.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

ManageEngine ADAudit Plus < Build 8606 Unauthenticated RCE

The ManageEngine ADAudit Plus running on the remote host is prior to build 8606. It is, therefore, affected by an unauthenticated remote code execution vulnerability: - Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by unauthenticated remote code execution due to the...

ManageEngine Endpoint Central < 11.4.2528.34 / 11.5.x < 11.5.2600.13 Cleartext Transmission of Sensitive Information

The version of ManageEngine Endpoint Central installed on the remote host is prior to 11.4.2528.34 or 11.5.x prior to 11.5.2600.13. It is, therefore, affected by a cleartext transmission of sensitive information vulnerability. Note that Nessus has not tested for this issue but has instead relied...

CVE-2026-11374-check — Updated!

CVE-2026-11374 ManageEngine AD360 Precondition Detection Script A detection script for the exploit precondition of CVE-2026-11374, a predictable SSO-ticket flaw that leads to unauthenticated account takeover across the ManageEngine AD360 suite. The four in-scope products share the...

ZOHO ManageEngine ServiceDesk Panel - Detect

ZOHO ManageEngine ServiceDesk panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine ServiceDesk panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

ZOHO ManageEngine OpManager Panel - Detect

ZOHO ManageEngine OpManager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine OpManager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine OpManager...

ZOHO ManageEngine KeyManagerPlus Panel - Detect

ZOHO ManageEngine KeyManagerPlus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine KeyManagerPlus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner,...

ZOHO ManageEngine Exchange Reporter Plus Panel - Detect

ZOHO ManageEngine Exchange Reporter Plus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine Exchange Reporter Plus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Zoho ManageEngine Network Configuration Manager Panel - Detect

ZOHO ManageEngine Network Configuration Manager was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine Network Configuration Manager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

ZOHO ManageEngine ADSelfService Plus - Detect

ZOHO ManageEngine ADSelfService panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine ADSelfService panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

ZOHO ManageEngine Applications Manager Panel - Detected

ZOHO ManageEngine panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine Applications Manager Panel -...

ZOHO ManageEngine Analytics Plus Panel - Detect

ZOHO ManageEngine analytics plus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine analytics plus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

ZOHO ManageEngine ADAudit/ADManager Panel - Detect

ZOHO ManageEngine ADAudit/ADManager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine ADAudit/ADManager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO...

ZOHO ManageEngine APEX IT Help-Desk Panel - Detect

ZOHO MangageEngine APEX panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO MangageEngine APEX panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine APEX IT Help-Desk...

ZOHO ManageEngine SupportCenter Panel - Detect

ZOHO ManageEngine SupportCenter panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine SupportCenter panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

Zoho ManageEngine - Access Control Bypass Detection

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting Detection

Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on the loadframe page. !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on.""" from...