[POC] CVE-2024-28995 Directory Traversal Vulnerability affecting SolarWinds Serv-U
by Unethical - Monday June 17, 2024 at 04:30 PM
MVP User
MVP
Posts: 33
Threads: 6
Joined: May 2024
Reputation: 79

#1
06-17-2024, 04:30 PM (This post was last modified: 06-17-2024, 04:31 PM by Unethical.)
SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.


POC: https://github.com/rapid7/metasploit-fra...pull/19255

Search Query:

Hunter: protocol.banner="Serv-U FTP"
FOFA: app="SolarWinds-Serv-U-FTP"
SHODAN: product:"Serv-U ftpd"


This is not my work, just thought I would share.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CVE-2024-5630 WordPress RCE via zip bypass upload HA_twck 61 6,418 11-01-2026, 10:10 AM
Last Post: H0lyM0ly
  !Next.js Middleware Bypass (CVE-2025-29927) Rat1337 22 1,451 09-17-2026, 03:49 AM
Last Post: kilkiller
  new wordpress website takeover vuln (video + poc ) zinzeur 314 27,626 09-07-2026, 03:09 AM
Last Post: zai2307
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,355 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,146 02-08-2026, 07:58 AM
Last Post: zeroday99



 Users browsing this thread: 1 Guest(s)