CVE-2019-16959

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...

CVE-2019-16960

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

EUVD-2021-21886

Malware in sbrugna...

EUVD-2021-21894

Malware in sbrugna...

EUVD-2021-21875

Malware in sbrugna...

EUVD-2010-4934

Malware in sbrugna...

EUVD-2021-18937

Malware in sbrugna...

EUVD-2019-7439

Malware in sbrugna...

EUVD-2019-7438

Malware in sbrugna...

EUVD-2019-7437

Malware in sbrugna...

EUVD-2019-7436

Malware in sbrugna...

EUVD-2019-7434

Malware in sbrugna...

EUVD-2019-7433

Malware in sbrugna...

EUVD-2019-7432

Malware in sbrugna...

EUVD-2019-7435

Malware in sbrugna...

EUVD-2009-1260

Malware in sbrugna...

EUVD-2024-41638

Malicious code in bioql PyPI...

EUVD-2024-26051

Malicious code in bioql PyPI...

SolarWinds Web Help Desk < 12.8.7 Hotfix 1 Unsafe Deserialization

The version of Solarwinds Web Help Desk installed on the remote host is prior to 12.8.7 Hotfix 1. It is, therefore, affected by an unsafe deserialization vulnerability. - SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution...

SolarWinds IT infrastructure management software AjaxProxy Arbitrary Command Execution

The vulnerability of the AjaxProxy component in SolarWinds IT infrastructure management software’s Web Help Desk system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotely...