CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability. The root cause is a lack of proper validation of client‑side data by the WEB application, enabling XSS as noted by Tenable Scan (Case 00484194). Affected product/version: SolarWinds Serv-U File ...

CVE-2020-15576

CVE-2020-15576 affects SolarWinds Serv-U File Server prior to version 15.2.1. The vulnerability enables information disclosure via an HTTP response. The vulnerability is documented across multiple sources (including Red Hat and CNVD/CVE records) confirming the affected product as SolarWinds Serv-...

CVE-2020-15576

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

CVE-2020-15574: Undefined Security Weakness

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...

CVE-2020-15575: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

CVE-2020-15576: Undefined Security Weakness

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

PT-2020-14503

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows for XSS, as demonstrated by Tenable Scan. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

PT-2020-14504

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows information disclosure via an HTTP response. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

PT-2020-14502

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to the mishandling of the Same-Site cookie attribute. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

PT-2020-14501

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to a Cross-script vulnerability. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

CVE-2020-15573: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...

httpd: mod_proxy_ftp use of uninitialized value

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

HFS Http File Server 2.3m Build 300 - Buffer Overflow (PoC)

Exploit Title: HFS Http File Server 2.3m Build 300 - Buffer Overflow PoC Date: 2020-06-05 Exploit Author: hyp3rlinx Vendor Homepage: www.rejetto.com CVE : CVE-2020-13432 + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

June 9, 2020—KB4561649 (OS Build 10240.18608)

None None...

June 9, 2020—KB4561621 (OS Build 17134.1550)

None None...

CVE-2020-13432

rejetto HFS aka HTTP File Server v2.3m Build 300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers...

Design/Logic Flaw

rejetto HFS aka HTTP File Server v2.3m Build 300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers...

CVE-2020-13432

rejetto HFS aka HTTP File Server v2.3m Build 300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers...

CVE-2020-13432

The CVE-2020-13432 entry concerns rejetto HFS (HTTP File Server) v2.3m Build 300. The connected docs confirm a remote buffer overflow that, under concurrent HTTP requests with long URIs or long headers, can trigger an invalid-pointer write access violation in hfs.exe, effectively enabling remote ...

HFS Http File Server 2.3m Build 300 Buffer Overflow Exploit

HFS Http File Server version 2.3m build 300 suffers from a remote buffer overflow vulnerability that can lead to a denial of service. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...