EUVD-2024-46792

Malicious code in bioql PyPI...

EUVD-2024-46731

Malicious code in bioql PyPI...

EUVD-2024-36139

Malicious code in bioql PyPI...

CVE-2025-27709

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

CVE-2025-36527

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports...

CVE-2025-41407

Zohocorp ManageEngine ADAudit Plus, prior to version 8511, has a SQL injection vulnerability in the OU History report. Root cause: improper handling of input in the OU History reporting path leading to SQL injection. Impact: potential unauthorized access or data disclosure from affected installat...

CVE-2025-3836

CVE-2025-3836 affects Zohocorp ManageEngine ADAudit Plus versions 8.5.10 and earlier, with an authenticated SQL injection in the logon events aggregate report. The root cause is an injection vulnerability exploitable by an authenticated user when accessing the logon events aggregate report. The i...

CVE-2024-5556

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module...

CVE-2024-36518

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard...

CVE-2024-36517

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

CVE-2024-49574

Affected software: ManageEngine ADAudit Plus. Versions below build 8123 are vulnerable to a SQL injection flaw in the reports module. Root cause: improper handling of SQL queries in the reports component leading to injection. Impact: high confidentiality and integrity impact; partial availability...

CVE-2024-36485 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...

CVE-2024-36517

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

CVE-2024-36515

CVE-2024-36515 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. The issue is an authenticated SQL injection in the dashboard component, due to improper handling of inputs in dashboard queries. The impact is described as high in the CVE entries. No remediation steps are provided in ...

CVE-2024-5467 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report...

CVE-2024-36035 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

CVE-2024-5527 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus

Code to support my CVE-2022-28219 analysishttps://attackerk...

Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus

CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine A...