Solarwinds Orion AccountManagement.asmx GetAccounts Admin Creation Exploit

This module exploits a stacked SQL injection in order to add an administrator user to the SolarWinds Orion database. Usage Info msf use auxiliary/gather/solarwindsorionsqli msf auxiliarysolarwindsorionsqli show actions ...actions... msf auxiliarysolarwindsorionsqli set ACTION msf...

Solarwinds Orion AccountManagement.asmx GetAccounts Admin Creation

This module exploits a stacked SQL injection in order to add an administrator user to the SolarWinds Orion database. Module Options msf use auxiliary/gather/solarwinds/orionsqli msf undefinedorionsqli show actions ...actions... msf undefinedorionsqli set ACTION msf undefinedorionsqli show options...

SolarWinds Server and Application Monitor Buffer Overflow Vulnerability (CNVD-2015-01241)

SolarWinds Server and Application Monitor is a server and application monitor from SolarWinds USA. The monitor provides monitoring, alerts, reports and more for server hardware and applications. A security vulnerability in the SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl...

SolarWinds Server and Application Monitor Buffer Overflow Vulnerability (CNVD-2015-01240)

SolarWinds Server and Application Monitor is a server and application monitor from SolarWinds USA. The monitor provides monitoring, alerts, reports and more for server hardware and applications. SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl has multiple stack buffer...

CVE-2015-1501

The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via a UNC path to a crafted binary...

CVE-2015-1500

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via unspecified vectors to 1 graphManager.load or 2 factory.load...

Server side request forgery (ssrf)

The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via a UNC path to a crafted binary...

Stack overflow

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via unspecified vectors to 1 graphManager.load or 2 factory.load...

CVE-2015-1500

Summary: CVE-2015-1500 affects SolarWinds Server and Application Monitor (SAM) via the TSUnicodeGraphEditorControl. The two identified attack surfaces are the graphManager.load and the factory.loadExtensionFactory paths. The root cause is stack-based buffer overflows caused by insufficient valida...

CVE-2015-1501

The CVE-2015-1501 flaw affects SolarWinds Server and Application Monitor (SAM) in the TSUnicodeGraphEditorControl: factory.loadExtensionFactory accepts a UNC path to a crafted binary, enabling remote code execution. Multiple sources (e.g., ZDI-15-043, CPAI-2015-0429, CNVD-2015-01241) describe rem...

CVE-2015-1501

The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via a UNC path to a crafted binary...

CVE-2015-1500

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via unspecified vectors to 1 graphManager.load or 2 factory.load...

SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl factory.loadExtensionFactory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl graphManager.load Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl factory.loadExtensionFactory Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

Solarwinds-Storage-Manager-5.1.0

Exploit Title: Solarwinds Storage Manager 5.1.0 Remote SYSTEM SQL Injection Exploit Date: May 2nd 2012 Author: muts Version: SolarWinds Storage Manager 5.1.0 Tested on: Windows 2003 Archive Url : http://www.offensive-security.com/0day/solarshell.txt import urllib, urllib2, cookielib import sys...

Log and Event Manager now with File Integrity Monitoring

Security pros everywhere rely on SolarWinds Log & Event Manager for powerful, affordable, and efficient Security Information and Event Management SIEM. Our All-In-One SIEM combines log management, event correlation, visualization, reporting, File Integrity Monitoring, USB defense, SQL database...

SolarWinds Log and Event Manager Detection

Binary data solarwindslemdetect.nbin...

SolarWinds Log and Event Manager Default Credentials

The remote SolarWinds Log and Event Manager install, a security information and event management SIEM solution, is protected with a set of known default credentials that allow administrator level access to the appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SolarWinds Log and Event Manager Unsupported Version Detection

According to its self-reported version number, the version of the SolarWinds Log and Event Manager on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...