CVE-2024-28987-POC

الوصف : يتأثر برنامج SolarWinds Web Help Desk WHD بثغرة أمان تتعلق ببيانات اعتماد مشفرة، مما يسمح لمستخدم غير موثوق عن بعد بالوصول إلى الوظائف الداخلية وتعديل البيانات. التأثير المحتمل : قد يسمح استغلال CVE-2024-28987 للمهاجم بتجاوز سياسات الأمان المطبقة في SolarWinds Web Help Desk، مما قد يؤدي إ...

CVE-2023-47246-EXP

تفاصيل الثغرة 1. fofa: root@kitploit: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. الإصدارات المتأثرة: SysAid Server23.3.36 إعادة إنتاج الثغرة 1. نفّذ البرنامج النصي: root@kitploit: git clone...

CVE-2024-28987

CVE-2024-28987 - Exploit delle Credenziali Hardcoded di SolarWinds Web Help Desk ⚠️ DISCLAIMER: Questo strumento è destinato esclusivamente a scopi educativi e di test di sicurezza autorizzati. L'accesso non autorizzato a sistemi informatici è illegale. Utilizza questo strumento solo su sistemi di...

CVE-2019-10008

CVE-2019-10008 Sequestro de conta privilegiada do ManageEngine Service Desk Plus 9.3 Data: 30-03-2019 Autor do exploit: Ata Hakçıl, Melih Kaan Yıldız Fornecedor: ManageEngine Página do fornecedor:www.manageengine.com Produto: Service Desk Plus Versão: 10.0 Testado em: Windows 10 64 bit CVE :...

CVE-2024-28987

CVE-2024-28987: Vulnerabilità con credenziali hardcoded in SolarWinds Web Help Desk Proof of concept per sfruttare CVE-2024-28987 su server vulnerabili. Post del blog Causa principale e indicatori di compromissione qui:...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

JS Help Desk <= 2.8.2 - SQL Injection

JS Help Desk WordPress plugin 2.8.2 contains a SQL injection caused by insufficient escaping and preparation of user-supplied values in 'js-support-ticket-token-tkstatus' cookie, letting unauthenticated attackers extract sensitive database information, exploit requires no authentication. id:...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 e CVE-2025-40553 Catena RCE Pre-Auth di SolarWinds Web Help Desk Strumento Generatore di Artefatti di Rilevamento per la Catena RCE Pre-Auth di SolarWinds Web Help Desk Descrizione Questo Generatore di Artefatti di Rilevamento verifica se un'istanza di SolarWinds Web Help Desk è...

CVE-2025-26399

CVE-2025-26399 Como funciona este método de deteção? Este script deteta instâncias do SolarWinds Web Help Desk vulneráveis ao CVE-2025-26399 ao solicitar a página de login do Helpdesk, confirmar identificadores do produto na resposta, extrair o token de compilação incorporado como uma string de...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk contains an authentication bypass vulnerability caused by improper access control, letting attackers execute protected actions without authentication, exploit requires no special conditions. id: CVE-2025-40552 info: name: SolarWinds Web Help Desk - Authentication Bypass...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

CVE-2025-40554

Suíte de Exploração CVE-2025-40554 Uma ferramenta abrangente de teste de segurança para detectar e explorar a vulnerabilidade de bypass de autenticação CVE-2025-40554 / CVE-2025-40536 no SolarWinds Web Help Desk. ⚠️ Aviso Legal APENAS PARA FINS EDUCACIONAIS E DE TESTES DE SEGURANÇA AUTORIZADOS Est...

CVE-2025-67223

CVE-2025-67223: Aranda Service Desk में गलत पहुँच नियंत्रण और सूचना प्रकटीकरण CVE ID: CVE-2025-67223 प्रभावित उत्पाद: Aranda Service Desk Aranda File Server - AFS मॉड्यूल प्रभावित संस्करण: 8.3.12 लेखक: Brandon Perez Lara 🚨 अवलोकन Aranda Service Desk के फ़ाइल प्रबंधन मॉड्यूल Aranda File Server में...

CVE-2024-28987

CVE-2024-28987 Proof-of-Concept-Exploit für CVE-2024-28987: SolarWinds Web Help Desk – Schwachstelle durch fest codierte Anmeldedaten Übersicht Extrahiert bis zu 25 der aktuellsten Tickets API-Einschränkung Ruft vollständige Details für jedes Ticket ab Analysiert Ticket-IDs, um die Gesamtzahl der...

auth-bypass-CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk Bypass Autenticazione PoC Query Shodan root@kitploit: http.favicon.hash:"1895809524" Nuclei root@kitploit: nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml root@kitploit: pip install -r requirements.txt...

Zoho ManageEngine ServiceDesk Plus - Authentication Bypass

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. id: CVE-2021-37415 info: name: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass author: daffainfo,jjcho severity: critical description: | Zoho...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

SolarWinds Web Help Desk - Hardcoded Credential

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. id: CVE-2024-28987 info: name: SolarWinds Web Help Desk - Hardcoded Credential author:...

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...

CVE-2025-14602

The application generates uploaded file names using a weak and predictable method based on the request timestamp. This allows a remote attacker to accurately guess or brute-force the generated filename within a short time window. An attacker can successfully locate and access uploaded files, whic...