Design/Logic Flaw

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

CVE-2014-5504

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

CVE-2014-5504

SolarWinds Log and Event Manager pre-6.0.1 is affected by a HyperSQL authentication flaw due to static/default credentials, enabling a remote, unauthenticated attacker to execute arbitrary code in the database context. Some 6.0.0 instances may be unaffected; remediation is to upgrade to 6.0.1 or ...

SolarWinds Storage Resource Monitor / SolarWinds Storage Manager Detection (credentialed check)

Binary data solarwindsstoragemanagerinstalled.nbin...

SolarWinds Log and Event Manager Static Credential Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Log and Event Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the usage of HyperSQL. The issue lies in the usage of static...

SolarWinds Storage Manager < 5.7.2 Remote Code Execution

The remote host is running a version of SolarWinds Storage Manager prior to 5.7.2. It is, therefore, affected by a remote code execution vulnerability due to a flaw in the 'AuthenticationFilter' class. A remote, unauthenticated attacker can exploit this vulnerability to upload malicious scripts...

SolarWinds Storage Manager AuthenticationFilter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AuthenticationFilter class. The issue lies in the ability to subvert th...

SolarWinds Storage Manager Authentication Bypass

This module exploits an authentication bypass vulnerability in Solarwinds Storage Manager. The vulnerability exists in the AuthenticationFilter, which allows to bypass authentication with specially crafted URLs. After bypassing authentication, is possible to use a file upload function to achieve...

CVE-2014-3459

Heap-based buffer overflow in SolarWinds Network Configuration Manager NCM before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property...

Heap overflow

Heap-based buffer overflow in SolarWinds Network Configuration Manager NCM before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property...

CVE-2014-3459

The CVE-2014-3459 issue affects SolarWinds Network Configuration Manager (NCM) prior to version 7.3, where a heap-based buffer overflow in the PEstrarg1 property can be exploited to execute arbitrary code. The root cause is a failure to validate the input size before copying into a fixed-size hea...

CVE-2014-3459

Heap-based buffer overflow in SolarWinds Network Configuration Manager NCM before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property...

solarwinds tftp server standard edition 5.0.55 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6045/info SolarWinds TFTP Server is distributed for the Microsoft Windows platform. The SolarWinds TFTP Server does not properly handle user-supplied input. Due to insufficient handling of user input, it is possible for a...

Solarwinds 10.4.0.10 TFTP DoS

No description provided by source. Exploit Title: Solarwinds TFTP DOS Date: 5-21-2010 Author: Nullthreat Software Link: http://www.solarwinds.com/products/freetools/freetftpserver.aspx Version: 10.4.0.10 Tested on: Windows XP SP3 Code : !/usr/bin/perl SolarWinds TFTP Server 10.4.0.10 Remote DoS...

SolarWinds Server and Application Monitor ActiveX (Pepco32c) Buffer Overflow

No description provided by source. html !-- SolarWinds Server and Application Monitor ActiveX Pepco32c Buffer Overflow Vendor: SolarWinds Version: 6.0 Tested on: Windows 2003 SP2 / IE Download: http://www.solarwinds.com/downloads/ Author: Blake CLSID: 8AE9F829-D587-42BB-B5C1-09EE8D9547FA Path:...

Solarwinds Storage Manager 5.1.0 - Remote SYSTEM SQL Injection Exploit

No description provided by source. !/usr/bin/python Exploit Title: Solarwinds Storage Manager 5.1.0 Remote SYSTEM SQL Injection Exploit Date: May 2nd 2012 Author: muts Version: SolarWinds Storage Manager 5.1.0 Tested on: Windows 2003 Archive Url :...

solarwinds orion network performance monitor 10.2.2 - Multiple Vulnerabilities

No description provided by source. / Exploit Title: SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities Date: Jul 21 2012 Author: muts Version: SolarWinds Orion Network Performance Monitor 10.2.2 Vendor URL: http://www.solarwinds.com/ Timeline: 29 May 2012: Vulnerability...

Solarwinds Storage Manager 5.1.0 - SQL Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Solarwinds 10.4.0.13 Denial of Service Exploit

No description provided by source. !/usr/bin/python print \n print Nullthreat Network print Solarwinds TFTP Server Ver. 10.4.0.13 print Elliott \Nullthreat\ Cutright print [email protected] print print \n Summary: An long Write Request 1000 A's will cause SolarWinds TFTP Server to crash...

SolarWinds TFTP Server Standard Edition 5.0.55 Large UDP Packet Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6043/info A problem in SolarWinds TFTP Server may result in a denial of service, and may have other ramifications. SolarWinds TFTP Server is distributed for the Microsoft Windows platform. Under some circumstances, it may...