SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

SolarWinds Security Event Manager - Unauthenticated RCE

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution. id: CVE-2024-0692 info: name: SolarWinds Security Event Manager - Unauthenticated RCE...

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk contains an authentication bypass vulnerability caused by improper access control, letting attackers execute protected actions without authentication, exploit requires no special conditions. id: CVE-2025-40552 info: name: SolarWinds Web Help Desk - Authentication Bypass...

CVE-2024-28987

CVE-2024-28987 - Exploit de Credenciales Hardcodeadas en SolarWinds Web Help Desk ⚠️ DESCARGO DE RESPONSABILIDAD: Esta herramienta es solo para fines educativos y de pruebas de seguridad autorizadas. El acceso no autorizado a sistemas informáticos es ilegal. Utiliza esta herramienta únicamente en...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

CVE-2019-3980

CVE-2019-3980 Explotación de CVE-2019-3980 escrita en win32/c++ dependencia de openssl. Puerto de https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instrucciones Este PoC requiere bibliotecas openssl enlazadas estáticamente. Coloca los includes de openssl en...

servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" crash pre-autenticazione Analisi della causa principale + proof-of-concept DoS. L'avviso pubblico classifica la vulnerabilità come un denial-of-service / consumo di risorse non controllato non autenticato. L'analisi binaria mostra che...

Log4NetSolarWindsSNMP-

Log4NetSolarWindsSNMP- Applicazione di test per l'avviso CVE-2018-1285 per le DLL di Solarwinds...

nmap-CVE-2023-23333-exploit

nmap-CVE-2023-23333-exploit Script NSE di Nmap per scaricare /etc/passwd da un sistema remoto sfruttando la vulnerabilità Solarwinds CVE-2023-23333 Salva lo script in un file chiamato solar-CVE-2023-23333.nse. Per eseguire lo script, puoi usare l'opzione --script-args di Nmap per fornire il...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U ist ein Multiprotokoll-Dateiserver, der Dateien über verschiedene Wege von und zu anderen vernetzten Computern senden und empfangen kann. CVE-2024-28995 ist eine nicht authentifizierte Directory-Traversal-Schwachstelle in...

CVE-2020-10148-Solarwinds-Orion

CVE-2020-10148 Solarwinds Orion Scarica CVE-2020-10148.py root@kitploit: wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Ricerca di Solarwinds Orion su Shodan root@kitploit:...

CVE-2025-40554

Suíte de Exploração CVE-2025-40554 Uma ferramenta abrangente de teste de segurança para detectar e explorar a vulnerabilidade de bypass de autenticação CVE-2025-40554 / CVE-2025-40536 no SolarWinds Web Help Desk. ⚠️ Aviso Legal APENAS PARA FINS EDUCACIONAIS E DE TESTES DE SEGURANÇA AUTORIZADOS Est...

nCentralDumpsterDiver

SolarWinds n-Central Dumpster Diver Beschreibung / Erklärung Für weitere Informationen wurden Korrekturen/Workarounds veröffentlicht: https://vulners.com/cve/CVE-2020-7984 Diese Anwendung nutzt die nCentral-Agent-.NET-Bibliotheken, um die Agentenregistrierung zu simulieren und die...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE Basato sulla mia ricerca durante un test di penetrazione, vedi i dettagli qui https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

solarwinds-sunburst-cve-2020-10148

🔍 Ricerca sulle vulnerabilità Una collezione curata di writeup approfonditi sulle vulnerabilità che coprono incidenti di sicurezza reali nell'ecosistema software. Ogni voce include un'analisi tecnica completa, proof-of-concept, elenco di IOC e indicazioni per la remediation. Scopo: Riferimento...

CVE-2024-28995

Эксплойт для CVE-2024-28995 5 июня 2024 года компания SolarWinds опубликовала уведомление об уязвимости CVE-2024-28995 — высокоопасной уязвимости обхода каталогов, затрагивающей их решение для передачи файлов Serv-U. Уязвимость была обнаружена исследователем Хусейном Дахером из Web Immunify...

SolarWinds Serv-U - Directory Traversal

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. id: CVE-2024-28995 info: name: SolarWinds Serv-U - Directory Traversal author: DhiyaneshDK severity: high description: | SolarWinds Serv-U was susceptibl...

CVE-2026-28323

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled...

CVE-2026-28323 SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled...