SolarWinds Serv-U FTP Server 服务器 跨站请求伪造漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from SolarWinds, Inc. in the United States. A security vulnerability exists in Serv-U Server that stems from the Serv-U Server responding with a valid CSRFToken when a request contains only a Session...

PT-2021-20865 · Unknown · Serv-U Console

Name of the Vulnerable Software and Affected Versions: Serv-U Console affected versions not specified Description: The issue allows a user with admin rights in Serv-U Console to move, create, and delete any files accessible on the Serv-U host machine. Recommendations: At the moment, there is no...

CVE-2021-35242: Cross-Site Request Forgery (CSRF)

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2021-35245: Improper Access Control

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...

SolarWinds Serv-U Remote Code Execution (CVE-2021-35211)

A remote code execution vulnerability exists in SolarWinds Serv-U. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-35245

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...

A week in security (Nov 8 – Nov 14)

Last week on Malwarebytes Labs Multiple video games break after domain name snafu How to remove adware on an Android phone Smart TV adverts put a wrinkle in your programming Are cybercriminals turning away from the US and targeting Europe instead? Patch now! Microsoft plugs actively exploited...

Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

Microsoft has detected exploits being used to compromise systems running the ZOHO ManageEngine ADSelfService Plus software versions vulnerable to CVE-2021-40539 in a targeted campaign. Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group...

SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution...

Exploit for Out-of-bounds Write in Solarwinds Serv-U

PoC exploit for CVE-2021-35211, a vulnerability in Serv-U. The t...

A deep-dive into the SolarWinds Serv-U SSH vulnerability

Several weeks ago, Microsoft detected a 0-day remote code execution exploit being used to attack the SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center MSTIC attributed the attack with high confidence to DEV-0322, a group operating out of Chin...

A deep-dive into the SolarWinds Serv-U SSH vulnerability

Several weeks ago, Microsoft detected a 0-day remote code execution exploit being used to attack the SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center MSTIC attributed the attack with high confidence to DEV-0322, a group operating out of Chin...

SolarWinds Serv-U File Server has an unspecified vulnerability

Solarwinds SolarWinds Serv-U File Server is a file transfer server from SolarWinds Solarwinds, Inc. A security vulnerability exists in SolarWinds Serv-U File Server, which can be exploited by attackers to remotely execute code...

CVE-2021-35223

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

CVE-2021-35223

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

Remote code execution

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

CVE-2021-35223

The CVE-2021-35223 vulnerability affects SolarWinds Serv-U File Server, specifically the Execute Command function that allows examining events (e.g., login failures) and passing parameters as user string variables, enabling remote code execution. The issue is tied to a remote, network-exposed vec...

CVE-2021-35223: Improper Input Validation

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

SolarWinds Serv-U File Server 安全漏洞

Solarwinds SolarWinds Serv-U File Server is a file transfer server from SolarWinds Solarwinds, Inc. A security vulnerability exists in SolarWinds Serv-U File Server, which can be exploited by attackers to remotely execute code...

The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems allows a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems is related to the disclosure of information in the error data field. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or increase the...