Flexense DiskPulse Enterprise Cross-Site Scripting Vulnerability

Flexense DiskPulse Enterprise is a real-time disk change monitoring solution from Flexense Canada. The solution supports monitoring multiple disks or directories and exporting disk change monitoring statistics to a centralized SQL database. A cross-site scripting vulnerability exists in Flexense...

Flexense DiskSorter Enterprise Cross-Site Scripting Vulnerability

Flexense DiskSorter Enterprise is a file classification solution from Flexense Canada. The solution supports classification of files on local disks, network shares, NAS storage devices and enterprise storage systems. A cross-site scripting vulnerability exists in Flexense DiskSorter Enterprise...

CVE-2018-10567

XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7...

CVE-2018-10566

XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7...

CVE-2018-10565

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

CVE-2018-10568

XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7...

CVE-2018-10564

XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7...

Flexense SyncBreeze 10.7 Cross Site Scripting

Description: URL: l ocalhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense- SyncBreeze Version: from v10.1 to v10.7 Attack Type: Remote Impact: This attack allows an attacker...

Sophos Endpoint Protection 10.7 Tamper Protection Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-v10.7-TAMPER-PROTECTION-BYPASS-CVE-2018-4863.txt + ISR: Apparition Security Vendor: ============= www.sophos.com Product: =========== Sophos...

Immunity Canvas: ROOTPIPE

Name| rootpipe ---|--- CVE| CVE-2015-1130 Exploit Pack| CANVAS Description| OS X XPC Admin Framework rootpipe local privilege escalation Notes| CVE Name: CVE-2015-1130 VENDOR: Apple Notes: This is a local privilege escalation affecting all Mac OS X versions from 10.7 up to 10.10.2. We provide bot...

Apple Mac OSX 10.7.510.8.210.9.510.10.2 - Rootpipe Local Privilege Escalation

Apple Mac OSX 10.7.510.8.210.9.510.10.2 - Rootpipe Local Privilege Escalation PoC exploit code for rootpipe CVE-2015-1130 Created by Emil Kvarnhammar, TrueSec Tested on OS X 10.7.5, 10.8.2, 10.9.5 and 10.10.2 import os import sys import platform import re import ctypes import objc import sys from...

Apple Mac OSX < 10.7.5/10.8.2/10.9.5/10.10.2 - 'Rootpipe' Local Privilege Escalation

PoC exploit code for rootpipe CVE-2015-1130 Created by Emil Kvarnhammar, TrueSec Tested on OS X 10.7.5, 10.8.2, 10.9.5 and 10.10.2 import os import sys import platform import re import ctypes import objc import sys from Cocoa import NSData, NSMutableDictionary, NSFilePosixPermissions from...

Apple Mac OS X Multiple Vulnerabilities -04 (Sep 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Mac OS X Multiple Vulnerabilities -08 (Sep 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mac OS X Sudo Password Bypass Vulnerability

This Metasploit module gains a session with root permissions on versions of OS X with sudo binary vulnerable to CVE-2013-1775. Tested working on Mac OS 10.7-10.8.4, and possibly lower versions. If your session belongs to a user with Administrative Privileges the user is in the sudoers file and is...

Mac OS X : Java for OS X 2013-003

The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2013-003 update, which updates the Java version to 1.6.045. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...

Mac OS X 10.7 < 10.7.5 Multiple Vulnerabilities

Binary data 6583.prm...

Out-of-bounds

CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write or read via a crafted text glyph...

UBUNTU-CVE-2012-3706

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

UBUNTU-CVE-2012-3684

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...