Lucene search
+L

227 matches found

Nuclei
Nuclei
added 2026/09/10 4:50 a.m.45 views

Zoho ManageEngine - Access Control Bypass

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.8CVSS8AI score0.83543EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/09 1:40 a.m.8 views

CVE-2022-35405

CVE-2022-35405 My blog post Nuclei template Other article ManageEngine PAM360 and Password Manager Pro unauthenticated remote code execution vulnerability PoC Access Manager Plus authenticated only :...

9.8CVSS8.4AI score0.99927EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/07 7:25 a.m.9 views

pmp-exploit

pmp-exploit This exploit takes advantage of the Privilege Escalation vulnerability found within Password Manager Pro to elevate a regular user to SuperAdmin and then download the passwords and files stored within the application. Systems Affected root@kitploit: Product : ManageEngine Password...

6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.10 views

ManageEngine Password Manager Pro < Build 13235 SQLi (CVE-2026-14828)

According to its self-reported build number, the ManageEngine Password Manager Pro application running on the remote host is prior to build 13235. It is, therefore, affected by an authenticated SQL injection vulnerability. An authenticated, remote attacker can exploit this by crafting a malicious...

8.8CVSS6.3AI score0.01443EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/02 8:16 a.m.8 views

CVE-2026-14828

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability...

8.8CVSS0.01443EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 7:25 a.m.29 views

CVE-2026-14828

Zohocorp ManageEngine products—Password Manager Pro (before 13235), PAM360 (before 8561), and Access Manager Plus (before 4405)—are vulnerable to an authenticated SQL Injection flaw. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploit...

8.8CVSS6AI score0.01443EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 7:25 a.m.10 views

EUVD-2026-69888

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability...

8.8CVSS6AI score0.01443EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 7:25 a.m.44 views

CVE-2026-14828

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability...

8.8CVSS0.01443EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/13 11:17 a.m.16 views

CVE-2026-12263

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...

8.8CVSS0.00696EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 10:18 a.m.52 views

CVE-2026-12263

CVE-2026-12263 affects Zohocorp ManageEngine Password Manager Pro &lt;13232 and PAM360

8.8CVSS5.2AI score0.00696EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 10:18 a.m.13 views

CVE-2026-12263

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...

8.8CVSS5.2AI score0.00696EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/13 10:18 a.m.17 views

EUVD-2026-57776

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...

8.8CVSS5.2AI score0.00696EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 10:18 a.m.44 views

CVE-2026-12263 Authentication Bypass

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...

8.8CVSS0.00696EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/13 8:16 a.m.11 views

CVE-2026-11840

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...

8.8CVSS0.01583EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 7:35 a.m.101 views

CVE-2026-11840

Affected software : Zohocorp ManageEngine Password Manager Pro (versions before 13232) and ManageEngine PAM360 (versions before 8552). Vulnerability : authenticated SQL injection in these products. Root cause/impact : vulnerability exists in auth context allowing SQL injection with user credentia...

8.8CVSS5.5AI score0.01583EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 7:35 a.m.12 views

EUVD-2026-57740

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...

8.8CVSS5.5AI score0.01583EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 7:35 a.m.10 views

CVE-2026-11840

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...

8.8CVSS5.5AI score0.01583EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/13 7:35 a.m.43 views

CVE-2026-11840 SQL Injection

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...

8.8CVSS0.01583EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:19 p.m.18 views

CVE-2026-5785

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.6AI score0.01394EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/16 3:31 p.m.14 views

EUVD-2026-23239

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.9AI score0.01394EPSS
SaveExploits0References2
Rows per page
Query Builder