JOIN BREACHFORUMS TELEGRAM
[POC] CVE-2024-28995 Directory Traversal Vulnerability affecting SolarWinds Serv-U
by Unethical - Monday June 17, 2024 at 04:30 PM
MVP User
MVP
Posts: 53
Threads: 6
Joined: May 2024
Reputation: 79

MVP
#1
Jun 17, 2024, 04:30 PM (This post was last modified: Jun 17, 2024, 04:31 PM by Unethical.)
SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.


POC: https://github.com/rapid7/metasploit-fra...pull/19255

Search Query:

Hunter: protocol.banner="Serv-U FTP"
FOFA: app="SolarWinds-Serv-U-FTP"
SHODAN: product:"Serv-U ftpd"


This is not my work, just thought I would share.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  {SECRET} DATABASE OF EXPLOITS lulagain 434 25,982 Yesterday, 01:40 PM
Last Post: rootofhunter
  New Zer0 Day Wordpress A3g00n 79 3,089 Apr 30, 2026, 04:09 PM
Last Post: baku
  new wordpress website takeover vuln (video + poc ) zinzeur 314 28,198 Apr 30, 2026, 03:54 PM
Last Post: baku
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 66 3,098 Apr 29, 2026, 08:51 PM
Last Post: Yjuddur
  Acunetix Premium Cracked v24 Full Activated A3g00n 22 1,395 Apr 29, 2026, 09:22 AM
Last Post: Usercomplex

Forum Jump:


 Users browsing this forum: 1 Guest(s)