597 matches found
CVE-2013-1081
此脚本利用了Novell Zenworks移动设备管理中存在的一个本地文件包含（LFI）漏洞。 Metasploit模块 - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options 模块选项 auxiliary/scanner/http/novellmdmcreds: Name Current Setting Required Description Proxies no 使用代理链 RHOSTS yes 目标地址范围或CIDR标识 RPORT 80 yes 默认远程端口...
SUSE CVE-2011-3175
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request...
CVE-2026-3278
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting XSS. The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This...
EUVD-2026-12825
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting XSS. The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This...
CVE-2026-3278
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting XSS. The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This...
CVE-2026-3278 XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting XSS. The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This...
CVE-2026-3278
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting XSS. The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This...
CVE-2026-3278 XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting XSS. The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This...
CVE-2026-3278
OpenText ZENworks Service Desk (versions 25.2 and 25.3) is affected by CVE-2026-3278 due to improper neutralization of input during web page generation, leading to a cross-site scripting (XSS) vulnerability. The issue could allow an attacker to execute arbitrary JavaScript in the context of a use...
OpenText ZENworks Service Desk 跨站脚本漏洞
OpenText ZENworks Service Desk is a service desk system for IT service management and ticket handling developed by OpenText Corporation in Canada. Versions 25.2 and 25.3 of OpenText ZENworks Service Desk contain cross-site scripting vulnerabilities, which stem from improper input during web page...
PT-2026-26064
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting XSS. The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This...
SUSE CVE-2010-5323
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ZCM 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST...
CVE-2021-22521
A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges...
CVE-2013-6346
Cross-site request forgery CSRF vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-6347
Session fixation vulnerability in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors...
EUVD-2012-6200
Malware in sbrugna...
EUVD-2013-1132
Malware in sbrugna...
EUVD-2015-0795
Malware in sbrugna...