1132 matches found
CVE-2021-35242
Serv-U server responds with valid CSRFToken when the request contains only Session...
CVE-2021-35242
Serv-U server responds with valid CSRFToken when the request contains only Session...
CVE-2021-35245
When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...
Session fixation
Serv-U server responds with valid CSRFToken when the request contains only Session...
Code injection
When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...
CVE-2021-35242
CVE-2021-35242 affects SolarWinds Serv-U: the vulnerability arises because the Serv-U server responds with a valid CSRF token even when a request contains only a Session, enabling CSRF-like abuse. The public records show CVSS data indicating network attack vector with high impact on confidentiali...
CVE-2021-35245 Broken Access Control Vulnerability for SolarWinds Serv-U
When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...
CVE-2021-35245
CVE-2021-35245 affects SolarWinds Serv-U: when a user has admin rights in the Serv-U Console, they can move, create, and delete files accessible on the Serv-U host machine. The Nessus plugin for SolarWinds Serv-U 15.2.4
SolarWinds Serv-U File Server 安全漏洞
Solarwinds SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A security vulnerability exists in the SolarWinds Serv-U File Server that allows a user with administrator privileges in the Serv-U console to move, create, and delete any file that is accessible on the Serv-U...
PT-2021-20865 · Unknown · Serv-U Console
Name of the Vulnerable Software and Affected Versions: Serv-U Console affected versions not specified Description: The issue allows a user with admin rights in Serv-U Console to move, create, and delete any files accessible on the Serv-U host machine. Recommendations: At the moment, there is no...
PT-2021-20863
Name of the Vulnerable Software and Affected Versions: Serv-U affected versions not specified Description: The Serv-U server responds with a valid CSRFToken when the request contains only a Session. Recommendations: At the moment, there is no information about a newer version that contains a fix...
SolarWinds Serv-U FTP Server 服务器 跨站请求伪造漏洞
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from SolarWinds, Inc. in the United States. A security vulnerability exists in Serv-U Server that stems from the Serv-U Server responding with a valid CSRFToken when a request contains only a Session...
CVE-2021-35245: Improper Access Control
When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...
CVE-2021-35242: Cross-Site Request Forgery (CSRF)
Serv-U server responds with valid CSRFToken when the request contains only Session...
SolarWinds Serv-U Remote Code Execution (CVE-2021-35211)
A remote code execution vulnerability exists in SolarWinds Serv-U. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2021-35245
When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...
A week in security (Nov 8 – Nov 14)
Last week on Malwarebytes Labs Multiple video games break after domain name snafu How to remove adware on an Android phone Smart TV adverts put a wrinkle in your programming Are cybercriminals turning away from the US and targeting Europe instead? Patch now! Microsoft plugs actively exploited...
Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus
Microsoft has detected exploits being used to compromise systems running the ZOHO ManageEngine ADSelfService Plus software versions vulnerable to CVE-2021-40539 in a targeted campaign. Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group...
