CVE-2020-14008

This exploit leverages an authenticated RCE vulnerability in ManageEngine Applications Manager by uploading a malicious JAR file via directory traversal and triggering its execution through a WebLogic credential test. The JAR contains a reverse shell payload executed via the `weblogic.jndi.Environment` class.

This exploit leverages a deserialization vulnerability in ManageEngine Applications Manager to execute a PowerShell reverse shell with SYSTEM privileges. It authenticates with provided credentials and sends a malicious payload via the RestAPI/LogReceiver endpoint.