CVE-2021-35211

Exploit de Serv-U CVE-2021-35211 Potencial de DoS: revisa tus reglas de enfrentamiento El exploit no funciona siempre, pero funciona lo suficiente como para ejecutar el shellcode en aproximadamente 1 de cada 5 o 6 ejecuciones. Sin embargo, a veces un exploit fallido puede provocar que el servidor...

CVE-2026-36960

CVE-2026-36960: Cross-Site Request Forgery CSRF in Web Management Interface CVE ID: CVE-2026-36960 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Description The U-SPEED Router firmware...

CVE-2026-36959

CVE-2026-36959: Falta de Limitación de Velocidad en el Endpoint de Inicio de Sesión ID CVE: CVE-2026-36959 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: U-SPEED Producto: Router U-SPEED Versión de Firmware: V1.0.0 CWE: CWE-307 - Restricción Inadecuada de Intentos de Autenticación...

CVE-2026-36958

CVE-2026-36958: Denegación de Servicio mediante Solicitudes HTTP Concurrentes ID CVE: CVE-2026-36958 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: U-SPEED Producto: Router U-SPEED Versión de Firmware: V1.0.0 CWE: CWE-400 - Consumo de Recursos No Controlado Descripción El firmware V1.0...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U es un servidor de archivos multiprotocolo capaz de enviar y recibir archivos desde otros equipos de la red a través de diversos medios. CVE-2024-28995 es una vulnerabilidad de traversal de directorios no autenticada en SolarWin...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

GHSA-XP7J-H7JC-4W8P Semaphore U: OS Command Injection

Summary An OS command injection in repository giturl handling lets any user holding the Manager or Owner role on any project the normal project-collaborator roles achieve remote code execution on the Semaphore server host. Using git's --upload-pack= option, an attacker runs arbitrary commands. Th...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

PT-2026-88450

🔴 CISA flags hardcoded credential flaw in CareCam Pro IP cameras deployed globally ANJIA AJL33PC0801 IP camera firmware linuxlinux202008261138 svn13796, U-Boot 2010.06 compiled Aug 26 2020 contains hardcoded bootloader credentials. An attacker with physical access can exploit CVE-2026-85083 to ga...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 , a USB Wi-Fi 4 N300 T1 Pro adapter, is vulnerable to cleartext transmission of administration credentials over HTTP . An attacker on the adjacent network can intercept unencrypted admin credentials without requiring prior privileges or user interaction, resulting...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

EUVD-2026-74263

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

CVE-2019-12181

CVE-2019-12181 针对CVE-2019-12181 Serv-U FTP 15.1.6的LPE利用...

CVE-2026-86431

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...

servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" caída pre-autenticación Análisis de causa raíz + prueba de concepto de DoS. El aviso público clasifica esto como una denegación de servicio / consumo no controlado de recursos no autenticada. El análisis binario muestra que el defecto...

CVE-2026-86272

A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch...

CVE-2026-86272 Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload

A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch...

CVE-2026-86272

A vulnerability exists in Beijing Meite Software Technology U+Smart Enjoyment WebSite version 18.6001.1096.1000, specifically in the file /Report/Upload/UploadFormImg.ashx . An attacker can remotely manipulate the File argument to perform an unrestricted file upload , requiring no authentication ...

Linux Distros Unpatched Vulnerability : CVE-2025-70292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - u-boot - None Ubuntu Linux - Unknown description CVE-2025-70292 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2025-70290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk...