https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:04:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-255845 EUVD-2026-255845 https://cve.radiocsirt.org/vuln/euvd-2026-255845 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28810 <p>Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with minimal effort. Additionally, a remote and partially authenticated attacker may be able to inject arbitrary commands into the custom script due to an unsanitized password field.</p> <p>Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with minimal effort. Additionally, a remote and partially authenticated attacker may be able to inject arbitrary commands into the custom script due to an unsanitized password field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-28810 https://cve.radiocsirt.org/vuln/ghsa-q392-qg7v-xvc4 <p>Zoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote code execution via executable CMD.EXE input in a password field, This only occurs if a certain password sync feature is enabled that uses passwords as script arguments.</p> <p>Zoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote code execution via executable CMD.EXE input in a password field, This only occurs if a certain password sync feature is enabled that uses passwords as script arguments.</p> https://cve.radiocsirt.org/vuln/ghsa-q392-qg7v-xvc4 https://cve.radiocsirt.org/vuln/gsd-2022-28810 gsd-2022-28810 https://cve.radiocsirt.org/vuln/gsd-2022-28810