282 matches found
SolarWinds Web Help Desk - Authentication Bypass
SolarWinds Web Help Desk contains an authentication bypass vulnerability caused by improper access control, letting attackers execute protected actions without authentication, exploit requires no special conditions. id: CVE-2025-40552 info: name: SolarWinds Web Help Desk - Authentication Bypass...
SolarWinds Web Help Desk - Authentication Bypass
SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...
CVE-2024-28987-POC
설명 : SolarWinds Web Help Desk WHD 소프트웨어는 하드코딩된 자격 증명 취약점의 영향을 받아, 원격의 인증되지 않은 사용자가 내부 기능에 접근하고 데이터를 수정할 수 있습니다. 잠재적 영향 : CVE-2024-28987 악용 시 공격자가 SolarWinds Web Help Desk에 구현된 보안 정책을 우회할 수 있습니다. 이로 인해 민감한 데이터에 대한 무단 접근, 구성 수정, 또는 시스템 무결성을 손상시킬 수 있는 기타 악의적인 행위가 발생할 수 있습니다. Web Help Desk가 기업 및 행정 기...
CVE-2025-40554
CVE-2025-40554 Набор инструментов для эксплуатации Комплексный инструмент для тестирования безопасности, предназначенный для обнаружения и эксплуатации уязвимости обхода аутентификации CVE-2025-40554 / CVE-2025-40536 в SolarWinds Web Help Desk. ⚠️ Отказ от ответственности ТОЛЬКО ДЛЯ ОБРАЗОВАТЕЛЬНЫ...
CVE-2024-28987
CVE-2024-28987 - SolarWinds Web Help Desk 하드코딩 자격 증명 악용 도구 ⚠️ 면책 조항: 이 도구는 교육 및 공인된 보안 테스트 목적으로만 사용됩니다. 컴퓨터 시스템에 대한 무단 접근은 불법입니다. 이 도구는 소유한 시스템이나 명시적 테스트 허가를 받은 시스템에서만 사용하십시오. 📋 개요 CVE-2024-28987 은 SolarWinds Web Help DeskWHD의 치명적인 취약점으로, 원격 공격자가 하드코딩된 자격 증명 을 사용하여 민감한 티켓 정보에 접근할 수 있게 합니다. 이 취약점은...
SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE
SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...
SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...
auth-bypass-CVE-2025-40554
CVE-2025-40554 – SolarWinds Web Help Desk Обход аутентификации PoC Shodan запрос root@kitploit: http.favicon.hash:"1895809524" Nuclei root@kitploit: nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml root@kitploit: pip install -r requirements.txt...
VulnCheck KEV: CVE-2025-40553
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...
watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553
CVE-2025-40552 및 CVE-2025-40553 SolarWinds Web Help Desk 사전 인증 RCE 체인 SolarWinds Web Help Desk 사전 인증 RCE 체인 탐지 아티팩트 생성 도구 설명 이 탐지 아티팩트 생성기는 SolarWinds Web Help Desk 인스턴스가 CVE-2025-40552 및 CVE-2025-40553에 취약한지 확인합니다. 탐지 아티팩트 생성기는 두 가지 작업을 수행하려고 시도합니다: CVE-2025-40552를 이용한 인증 우회 - 이 검사는 매우 정확합니다. 성공...
CVE-2025-26399
CVE-2025-26399 Como funciona este método de deteção? Este script deteta instâncias do SolarWinds Web Help Desk vulneráveis ao CVE-2025-26399 ao solicitar a página de login do Helpdesk, confirmar identificadores do produto na resposta, extrair o token de compilação incorporado como uma string de...
SolarWinds Web Help Desk < 2026.2.1 SAML Authentication Bypass (CVE-2026-28323)
The version of SolarWinds Web Help Desk installed on the remote host is prior to 2026.2.1. It is, therefore, affected by a SAML authentication bypass vulnerability: - SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0...
CVE-2026-28323 SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability
SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled...
CVE-2026-28323
SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled...
CVE-2026-28323
CVE-2026-28323 affects SolarWinds Web Help Desk with a SAML authentication bypass when SAML 2.0 is enabled. The NVD/NVD-derived metadata lists CVSS v3.1 base score 9.8 (CRITICAL) with network access, low attack complexity, no privileges, and high impact to confidentiality, integrity, and availabi...
PT-2026-66511
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk affected versions not specified Description An authentication bypass exists when the SAML 2.0 authentication method is enabled. The application treats SAML signature verification as optional and skips required validati...
SolarWinds Web Help Desk < 2026.2 Multiple Vulnerabilities
The version of SolarWinds Web Help Desk installed on the remote host is prior to 2026.2. It is, therefore, affected by multiple vulnerabilities. - pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores...
CVE-2026-28299
SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory...
