Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

CVE-2025-28009

CVE-2025-28009 - SQL Injection in Dietiqa App v1.0.20 Discovered by: Saharuddin Azman Vendor: Appventure Sdn Bhd Product: Dietiqa App Version Affected: v1.0.20 CVE ID: CVE-2025-28009 Vulnerability Type: SQL Injection 📝 Description A SQL Injection vulnerability exists in the u parameter of the...

CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

CVE-2024-28995

Exploit For CVE-2024-28995 On June 5, 2024, SolarWinds published an advisory for CVE-2024-28995, a high-severity directory traversal vulnerability affecting their file transfer solution Serv-U. The vulnerability was discovered by researcher Hussein Daher of Web Immunify. Using exploit python3...

CVE-2025-45512

U-Boot 1.1.3 Exploit PoC Usage Guide Introduction This Proof of Concept PoC was created to verify vulnerabilities in the U-Boot bootloader version 1.1.3 compiled on August 27, 2019. The code implements five different vulnerabilities relevant to the OWASP IoT Security Testing Guide ISTG categories...

Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

provisioner

Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...

CVE-2021-35211

Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...

CVE-2024-28995

CVE-2024-28995 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are the responsibility of the user. The tool author assumes no responsibility. version = 15.4 NAME: Serv-U -...

SolarWinds-CVE-2021-35250

SolarWinds-CVE-2021-35250 Serv-U v.15.3.0.X CVE-2021-35250-Directory-Traversal Hello everyone This is my first POC, don't judge strictly. Disclaimer The author of this repository is not responsible for any damage caused by the use or misuse of these PoC exploits. These PoCs are intended for...

MicroC-u-os2-vuln-code-extracted-from-

MicroC-u-os2-vuln-code-extracted-from- Buffer Overflow Attack and Prevention for an FPGA Based Soft-Processor System - 7th International Conference on Innovation in Electronics and Communication EngineeringICIECE'18...

CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

CVE-2024-28995

SolarWinds Serv-U Directory Traversal Vulnerability POC cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Analysis https://t.co/JPCd6Y4v1g Shodan Querys product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...

CVE-2019-12181

CVE-2019-12181 LPE Exploit For CVE-2019-12181 Serv-U FTP 15.1.6...

servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" pre-auth crash Root-cause analysis + DoS proof-of-concept. The public advisory classifies this as an unauthenticated denial-of-service / uncontrolled resource consumption. Binary analysis shows the underlying defect is memory-safety :...

CVE-2021-35211

Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...

Serv-U-CVE-2021-35211

This repository does not have a README...

SUSE CVE-2026-118767

Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char values without consistently rejecting the embedded NUL, causing bcrypt and checkbcrypt to process only the prefix before the NUL. Applications could...

chipicopwn

chipicopwn Bootloader exploit for Google Nest Hub 2nd Gen elaine requirements Google Nest Hub 2nd Gen Raspberry Pi Pico Powered USB hub or USB Y cable pico-sdk see Getting Started guide for installation instructions supported version factory firmware 2020/12 - U-Boot 2019.01-gbfc19012ea-dirty Dec...