Solarwinds Log and Event Manager/Trigeo SIM 6.1.0 - Remote Command Execution Exploit

Exploit for windows platform in category remote exploits Requirements: Python 2.7 netcat Tested on: Ubuntu 14.04 LTS Vulnerable Appliance Version: 6.1.0 Download: http://downloads.solarwinds.com/solarwinds/Release/LEM/SolarWinds-LEM-v6.1.0-Evaluation-VMware.exe Instructions: The exploitlem.py...

SolarWinds Log and Event Manager/Trigeo SIM 6.1.0 - Remote Command Execution

Requirements: Python 2.7 netcat Tested on: Ubuntu 14.04 LTS Vulnerable Appliance Version: 6.1.0 Download: http://downloads.solarwinds.com/solarwinds/Release/LEM/SolarWinds-LEM-v6.1.0-Evaluation-VMware.exe Instructions: The exploitlem.py script will need to be run sudo since it uses sockets which...

The vulnerability of the SolarWinds Storage Manager data management software allows a hacker to upload and execute arbitrary files.

The vulnerability of the ProcessFileUpload.jsp component in the SolarWinds Storage Manager data management software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely upload and execute arbitrary files...

SolarWinds Log and Event Manager < 6.2.0 Multiple Remote Command Execution Vulnerabilities

According to its self-reported version number, the SolarWinds Log and Event Manager installed on the remote host is prior to version 6.2.0. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the messagebroker/nonsecurestreamingamf service when using the traceroute...

SolarWinds Log and Event Manager Arbitrary Code Execution Vulnerability (CNVD-2015-06702)

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A security vulnerability exists in the command line management console CMC of SolarWinds Log and Event Manager. This allows remote attackers to...

SolarWinds Storage Manager File Upload and Execution Vulnerability

SolarWinds Storage Manager is a Web page-based storage management product with integrated storage monitoring, reporting, alerting and predictive analytics. A security vulnerability exists in the ProcessFileUpload.jsp file in SolarWinds Storage Manager. A remote attacker can exploit this...

SolarWinds Storage Resource Monitor < 6.2 ProcessFileUpload.jsp File Upload RCE

The remote host is running a version of SolarWinds Storage Resource Monitor formerly SolarWinds Storage Manager prior to 6.2. It is, therefore, affected by a remote code execution vulnerability due to improper sanitization of user-uploaded files by the ProcessFileUpload.jsp script. An...

CVE-2015-7840

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

CVE-2015-7839

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

CVE-2015-7838

ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified vectors...

Security feature bypass

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

Design/Logic Flaw

ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified vectors...

Design/Logic Flaw

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

CVE-2015-7838

ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified vectors...

CVE-2015-7838

The CVE-2015-7838 entry concerns SolarWinds Storage Manager prior to version 6.2, where ProcessFileUpload.jsp vulnerable to remote file upload. Multiple connected sources confirm that an unauthenticated attacker can upload and execute arbitrary files via unspecified vectors, leading to remote cod...

CVE-2015-7839

CVE-2015-7839 affects SolarWinds Log and Event Manager (LEM). The vulnerability allows an unauthenticated, remote attacker to execute arbitrary commands on managed hosts via a request to the nonsecurestreamingamf endpoint under services/messagebroker, leveraging the traceroute functionality. Mult...

CVE-2015-7840

CVE-2015-7840 affects the SolarWinds Log and Event Manager (LEM) command line management console (CMC) prior to version 6.2.0. The vulnerability allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature. Connected documents also reference CVE-2015-7839 a...

CVE-2015-7840

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

CVE-2015-7839

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

Solarwinds Storage Manager ProcessFileUpload.jsp File Upload

File upload vulnerability in Solarwinds Storage Manager ProcessFileUpload.jsp Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...