CVE-2020-10148

使用方法と免責事項 このスクリプトは、SolarWinds Orion API のリモートコード実行脆弱性（CVE-2020-10148）のバッチ検出スクリプトです。 使用方法：Python CVE-2020-10148.py urls.txt urls.txt 内の各URLは1行に記載し、脆弱性のあるアドレスは vul.txt に出力されます。 影響バージョン： SolarWinds Orion 2020.2.1 HF 2 および 2019.4 HF 6 より前のバージョンが本脆弱性の影響を受けます。...

CVE-2025-13807 orionsec orion-ops API MachineKeyController.java MachineKeyController improper authorization

A vulnerability was detected in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected is the function MachineKeyController of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java of the component API. The manipulation result...

2020 Ends With A Bang

December 2020 was an eventful month in cyber security. This blog recaps three of the major security events we saw towards the end of last year. December began with FireEye’s breach announcement that included a leak of its red team tools arsenal. Quickly after this announcement, Imperva Threat...

CVE-2020-10148

The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds...