CVE-2024-28987

CVE-2024-28987 - SolarWinds Web Help Desk 硬编码凭据漏洞利用工具 ⚠️ 免责声明： 本工具仅用于教育和授权的安全测试目的 。未经授权访问计算机系统属于违法行为。请仅对您拥有或已获得明确测试许可的系统使用本工具。 📋 概述 CVE-2024-28987 是 SolarWinds Web Help Desk WHD 中的一个严重漏洞，允许远程攻击者使用硬编码凭据 访问敏感工单信息。该漏洞的 CVSS 评分为 9.1（严重） ，并且正在野外被积极利用。 漏洞详情 属性| 值 ---|--- CVE ID| CVE-2024-28987 CVSS 评分|...

auth-bypass-CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk 认证绕过 PoC Shodan 查询 http.favicon.hash:"1895809524" Nuclei nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml pip install -r requirements.txt 用法 单目标（绕过 + 登录，默认 client/client）： python3 exploitauthbypass.py -t...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 与 CVE-2025-40553 SolarWinds Web Help Desk 预认证 RCE 链 SolarWinds Web Help Desk 预认证 RCE 链检测产物生成器工具 描述 此检测产物生成器用于验证 SolarWinds Web Help Desk 实例是否存在 CVE-2025-40552 和 CVE-2025-40553 漏洞。 检测产物生成器尝试执行两项操作： 使用 CVE-2025-40552 绕过身份验证 - 此检查非常准确。 如果成功，它会尝试通过执行 cmd.exe /c whoami 命令来验证...

CVE-2025-26399

CVE-2025-26399 此检测方法如何工作？ 此脚本通过请求 Helpdesk 登录页面、确认响应中的产品标识符、提取嵌入的构建令牌作为版本字符串，并标记运行版本早于 12.8.7.0 的系统，来检测受 CVE-2025-26399 影响的 SolarWinds Web Help Desk 实例。 如何运行此脚本？ 1. 从 此处 下载 Nuclei 2. 将模板复制到本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service SaaS offerings through information technology IT help desk vishing, adversary-in-the-middle AitM token theft, and residential-proxy sign-ins...

VulnCheck KEV: CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

SolarWinds Web Help Desk < 2026.2.1 SAML Authentication Bypass (CVE-2026-28323)

The version of SolarWinds Web Help Desk installed on the remote host is prior to 2026.2.1. It is, therefore, affected by a SAML authentication bypass vulnerability: - SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0...

CVE-2024-28987 — Updated!

CVE-2024-28987 - SolarWinds Web Help Desk Hardcoded Credentials Exploit ⚠️ DISCLAIMER: This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. Use this tool only on systems you own or have explicit permission to test. 📋...

WordPress JS Help Desk plugin < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability

Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability discovered by Shivamani Vastrala in WordPress Plugin JS Help Desk versions 3.1.4...

WordPress JS Help Desk plugin < 3.1.4 - Subscriber+ Sensitive Information Disclosure vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin JS Help Desk versions 3.1.4...

Kwetsbaarheid verholpen in SolarWinds Web Help Desk

SolarWinds has identified a vulnerability in the SolarWinds Web Help Desk’s authentication mechanism. This vulnerability involves an attempt to bypass the authentication process using SAML 2.0. This issue occurs in systems where SAML authentication is enabled. An attacker can exploit this...

CVE-2026-14930

The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a front-end request dispatcher, allowing unauthenticated users to upload files limited to the JS Help Desk WordPress plugin before 3.1.4's inert allowed extensions and attach them to...

CVE-2026-15209

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body...

CVE-2026-14928

The JS Help Desk WordPress plugin before 3.1.4 does not perform authorization or ownership checks before returning support-ticket content in a nonce-gated search handler, allowing any authenticated user Subscriber and above to read the subject and full message body of every other user's support...

CVE-2026-14929

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user Subscriber and above to overwrite the content of any support-ticket reply on the site...

CVE-2026-15209

The JS Help Desk WordPress plugin versions prior to 3.1.5 is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The application fails to verify if a requesting user owns the ticket being loaded. Consequently, a low-privileged authenticated user can provide a different user's ticket ID...

CVE-2026-14931

The JS Help Desk WordPress plugin, in versions prior to 3.1.4 , contains a vulnerability where the Contributor role is granted the support-agent capability upon activation. Due to a missing capability check on a user-listing handler , users with Contributor-level privileges can enumerate the emai...

CVE-2026-15209 JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body...