CVE-2024-28995

SolarWinds Serv-U: POC уязвимости обхода каталога root@kitploit: cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Анализ https://t.co/JPCd6Y4v1g Shodan-запросы product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U était vulnérable à une vulnérabilité de traversée de répertoire permettant d'accéder à des fichiers sensibles sur la machine hôte. INSTALLATION git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt UTILISATI...

SolarWinds-CVE-2021-35250

SolarWinds-CVE-2021-35250 Serv-U v.15.3.0.X CVE-2021-35250-Directory-Traversal 안녕하세요 여러분 제 첫 POC입니다. 엄격하게 판단하지 말아 주세요. 면책 조항 이 저장소의 작성자는 이러한 PoC 익스플로잇의 사용 또는 오용으로 인해 발생하는 어떠한 손해에도 책임을 지지 않습니다. 이러한 PoC는 교육 및 연구 목적으로만 제공되며, 소유자의 명시적인 허가 없이 시스템을 대상으로 하거나 악용하는 데 사용되어서는 안 됩니다. 설명 저는 "R-X Team"에서 일하고...

CVE-2024-28995

CVE-2024-28995 PoC et Scanner en Masse Présentation Ce dépôt contient une preuve de concept PoC et un scanner en masse pour la vulnérabilité de traversée de répertoire CVE-2024-28995 de SolarWinds Serv-U. Cette vulnérabilité permet un accès non autorisé pour lire des fichiers sensibles sur la...

CVE-2024-28995

CVE-2024-28995 Автоматизированный Path Traversal и локальное чтение файлов Возможности Обнаружение версии : Извлекает версию Serv‑U из заголовка сервера. Проверка уязвимости : Сравнивает обнаруженную версию с известной уязвимой версией 15.4.2 или ниже. Тестирование путей по умолчанию : Проверяет...

CVE-2024-28995

CVE-2024-28995 PoC SolarWinds Serv-U 存在目录遍历漏洞，允许攻击者读取主机上的敏感文件。 查询 Shodan: product:"Rhinosoft Serv-U httpd" "Serv-U FTP Server" Fofa: app="SolarWinds-Serv-U-FTP" 参考链接 https://nvd.nist.gov/vuln/detail/CVE-2024-28995 https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995...

CVE-2024-28995

Эксплойт для CVE-2024-28995 5 июня 2024 года компания SolarWinds опубликовала уведомление об уязвимости CVE-2024-28995 — высокоопасной уязвимости обхода каталогов, затрагивающей их решение для передачи файлов Serv-U. Уязвимость была обнаружена исследователем Хусейном Дахером из Web Immunify...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U ist ein Multiprotokoll-Dateiserver, der Dateien über verschiedene Wege von und zu anderen vernetzten Computern senden und empfangen kann. CVE-2024-28995 ist eine nicht authentifizierte Directory-Traversal-Schwachstelle in...

CVE-2026-28318-check

SolarWinds Serv-U DoS non autenticato: Script di rilevamento sicuro Un rilevatore sicuro, non distruttivo per CVE-2026-28318 , un denial-of-service non autenticato in SolarWinds Serv-U= 15.5.4.108. Un singolo POST che trasporta Content-Encoding: deflate e un corpo alimenta quel corpo a un...

servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" crash pre-autenticazione Analisi della causa principale + proof-of-concept DoS. L'avviso pubblico classifica la vulnerabilità come un denial-of-service / consumo di risorse non controllato non autenticato. L'analisi binaria mostra che...

CVE-2026-28321

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations...

CVE-2026-28317

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments...

CVE-2026-28312

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows deployments...

CVE-2026-28314

SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Windows deployments...

CVE-2026-28313

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments...

CVE-2026-28316

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the root user. This issue requires a domain account with administrator access. The impact is lower in...

CVE-2026-28315

SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator account...

CVE-2026-28304

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments...

CVE-2026-28309

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments...

CVE-2026-28306

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments...