cve-2020-28653-poc

Manage Engine OpManager CVE-2020-28653 개념 증명 이 개념 증명은 Manage Engine OpManager 인스턴스가 CVE-2020-28653에 취약한지 여부를 탐지합니다. 탐지는 직렬화된 페이로드를 포함한 요청을 인스턴스에 전송하여 수행됩니다. 페이로드가 역직렬화되면 인스턴스가 DNS 조회를 호출하게 됩니다. 설치 1. 다음 명령어로 저장소를 클론합니다: git clone https://github.com/intrigueio/cve-2020-2853-poc 2. 다음 명령어로 필요한 의존성을...

Zoho ManageEngine OpManager - SQL Injection

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet. id: CVE-2020-28653 info: name: ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization author: iamnoooob,pdresearch severity:...

Zoho ManageEngine OpManager < 12.5.329 - Remote Code Execution

Zoho ManageEngine OpManager before 12.5.329 contains a remote code execution caused by a general bypass in the deserialization class, letting unauthenticated attackers execute arbitrary code, exploit requires no authentication id: CVE-2021-3287 info: name: Zoho ManageEngine OpManager 12.5.329 -...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

CVE-2020-12116

CVE-2020-12116 CVE-2020-12116 취약점을 악용하기 위한 개념 증명 코드: ManageEngine OpManager에서의 인증되지 않은 임의 파일 읽기. 요약 OpManager의 최신 릴리스에는 디렉터리 트래버설 취약점이 포함되어 있어 OpManager 애플리케이션의 모든 파일에 대한 무제한 액세스를 허용합니다. 여기에는 개인 SSH 키, 비밀번호로 보호된 Java 키스토어, 키스토어, 개인 인증서 및 백엔드 데이터베이스의 비밀번호를 포함하는 구성 파일이 포함됩니다. LDAP가 구성된 경우...

CVE-2026-76978

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature...

CVE-2026-76979

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature...

CVE-2026-76980

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector...

CVE-2026-75825

ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability...

CVE-2026-19599

ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module...

EUVD-2026-85272

ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module...

CVE-2026-19599 Remote Code Execution vulnerability

ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module...

CVE-2026-19599

ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below are vulnerable to a Remote Code Execution (RCE) vulnerability located in the Notification Profile module . The root cause is identified as the Improper Neutralization of Special Elements used in an OS Command . This vulnerability cou...

CVE-2026-19599 Remote Code Execution vulnerability

ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module...

CVE-2026-75825 Authentication Bypass vulnerability

ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability...

CVE-2026-75825 Authentication Bypass vulnerability

ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability...

CVE-2026-75825

ZohoCorp ManageEngine OpManager versions 12.8.710 and below are affected by an Authentication Bypass vulnerability when the Application Manager Plugin is enabled. Exploitation of this flaw could allow an attacker to bypass security controls. No specific root cause, exploit details, or remediation...

EUVD-2026-85271

ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability...

CVE-2026-76978 Command Injection vulnerability

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature...