CVEs-PoC/2021/CVE-2021-44077.md

CVE-2021-44077

Description

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.

POC

Reference

• http://packetstormsecurity.com/files/165400/ManageEngine-ServiceDesk-Plus-Remote-Code-Execution.html

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/2lambda123/panopticon-unattributed
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/HimmelAward/Goby_POC
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/Panopticon-Project/panopticon-unattributed
• https://github.com/StarCrossPortal/scalpel
• https://github.com/Z0fhack/Goby_POC
• https://github.com/anonymous364872/Rapier_Tool
• https://github.com/apif-review/APIF_tool_2024
• https://github.com/apit-review-account/apit-tool
• https://github.com/horizon3ai/CVE-2021-44077
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/pizza-power/Golang-CVE-2021-44077-POC
• https://github.com/soosmile/POC
• https://github.com/youcans896768/APIV_Tool