ZOHO Zero Day Vulnerability

Zoho has released a security patch to address an authentication bypass vulnerability, tracked as CVE-2021-40539, in its Manage Engine AD Self-Service Plus. The vulnerability is already exploited in attacks in…

Manage Engine hits with a critical flaw

A critical vulnerability (CVE-2020-11552) in ManageEngine ADSelfService Plus, an Active Directory password-reset solution, could allow attackers to remotely execute commands with system level privileges on the target Windows host. CVE-2020-11552…