CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. INSTALL git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt USAGE Scan a single...

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

CVE-2024-28995

SolarWinds Serv-U Directory Traversal Vulnerability POC cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Analysis https://t.co/JPCd6Y4v1g Shodan Querys product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...

SolarWinds-CVE-2021-35250

SolarWinds-CVE-2021-35250 Serv-U v.15.3.0.X CVE-2021-35250-Directory-Traversal Hello everyone This is my first POC, don't judge strictly. Disclaimer The author of this repository is not responsible for any damage caused by the use or misuse of these PoC exploits. These PoCs are intended for...

CVE-2024-28995

CVE-2024-28995 PoC SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. Queries Shodan: product:"Rhinosoft Serv-U httpd" "Serv-U FTP Server" Fofa: app="SolarWinds-Serv-U-FTP" References...

CVE-2024-28995-Nuclei-Template

CVE-2024-28995 Nuclei Template Checks for directory traversal vulnerability in Serv-U versions 15.4.2 and below, which allows reading sensitive files like /etc/passwd. Template Details id: CVE-2024-28995 info: name: Serv-U Directory Traversal Vulnerability author: Hüseyin TINTAŞ severity: high...

CVE-2024-28995

CVE-2024-28995 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are the responsibility of the user. The tool author assumes no responsibility. version = 15.4 NAME: Serv-U -...

CVE-2019-12181

CVE-2019-12181 LPE Exploit For CVE-2019-12181 Serv-U FTP 15.1.6...

servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" pre-auth crash Root-cause analysis + DoS proof-of-concept. The public advisory classifies this as an unauthenticated denial-of-service / uncontrolled resource consumption. Binary analysis shows the underlying defect is memory-safety :...

CVE-2021-35211

Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...

Serv-U-CVE-2021-35211

This repository does not have a README...

CVE-2024-28995

Exploit For CVE-2024-28995 On June 5, 2024, SolarWinds published an advisory for CVE-2024-28995, a high-severity directory traversal vulnerability affecting their file transfer solution Serv-U. The vulnerability was discovered by researcher Hussein Daher of Web Immunify. Using exploit python3...

CVE-2021-35211

Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U is a multi-protocol file server capable of sending and receiving files from other networked computers through various means. CVE-2024-28995 is an unauthenticated directory transversal vulnerability in SolarWinds Serv-U that wou...

SolarWinds Serv-U - Directory Traversal

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. id: CVE-2024-28995 info: name: SolarWinds Serv-U - Directory Traversal author: DhiyaneshDK severity: high description: | SolarWinds Serv-U was susceptibl...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key. This enables attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor to elevate their privileges and execute arbitrary code as the root...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control mechanisms, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...