Flexense DiskPulse Enterprise security vulnerabilities

Flexense DiskPulse Enterprise is a centralized report database server offered by Flexense DiskPulse Corporation. Version 13.6.14 of Flexense DiskPulse Enterprise contains a security vulnerability. This vulnerability stems from the use of service paths without quotes in Windows service...

Flexense Disk Savvy code-related vulnerabilities

Flexense Disk Savvy is a hard drive space analysis tool developed by Flexense Corporation. Version 13.6.14 of Flexense Disk Savvy contains a code vulnerability. This vulnerability stems from Windows service configurations that include service paths without quotes, which may allow for the executio...

CVE-2021-47805

Disk Savvy 13.6.14 exposes an unquoted service path in its Windows service configuration, enabling local attackers to potentially execute arbitrary code with elevated LocalSystem privileges. The initial descriptions state this risk due to unquoted service binaries, but there are no official patch...

CVE-2020-36927

DiskPulse Enterprise 13.6.14 is affected by an unquoted service path vulnerability in its Windows service configuration. The unquoted path is 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe', which could allow a local attacker to inject a malicious executable and escalate privileges. The ...

DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path

Exploit Title: DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path Discovery by: Brian Rodriguez Date: 14-06-2021 Vendor Homepage: https://www.diskpulse.com Software Links: https://www.diskpulse.com/setupsx64/diskpulseentsetupv13.6.14x64.exe...

DiskPulse 13.6.14 - (Multiple) Unquoted Service Path Vulnerability

Exploit Title: DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path Discovery by: Brian Rodriguez Vendor Homepage: https://www.diskpulse.com Software Links: https://www.diskpulse.com/setupsx64/diskpulseentsetupv13.6.14x64.exe https://www.diskpulse.com/setupsx64/diskpulsesrvsetupv13.6.14x64.exe...

DiskPulse 13.6.14 Unquoted Service Path

Exploit Title: DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path Discovery by: Brian Rodriguez Date: 14-06-2021 Vendor Homepage: https://www.diskpulse.com Software Links: https://www.diskpulse.com/setupsx64/diskpulseentsetupv13.6.14x64.exe...