34 matches found
EUVD-2014-9817
Malware in sbrugna...
EUVD-2014-1745
Malware in sbrugna...
CVE-2014-125113
An unrestricted file upload vulnerability exists in Dell acquired by Quest KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the downloadagent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible...
CVE-2014-125113
An unrestricted file upload vulnerability exists in Dell acquired by Quest KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the downloadagent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible...
CVE-2014-125113
The Dell/Quest KACE K1000 System Management Appliance (versions 5.0–5.3, 5.4 before 5.4.76849, and 5.5 before 5.5.90547) is affected by an unauthenticated unrestricted file upload vulnerability in the download_agent.php endpoint. An attacker can upload PHP files to a temporary web‑accessible dire...
CVE-2014-125113 Dell/Quest KACE K1000 Unauthenticated File Upload RCE
An unrestricted file upload vulnerability exists in Dell acquired by Quest KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the downloadagent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible...
CVE-2014-125113 Dell/Quest KACE K1000 Unauthenticated File Upload RCE
An unrestricted file upload vulnerability exists in Dell acquired by Quest KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the downloadagent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible...
KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Dell Kace Appliance Multiple Vulnerabilities Exploit Author: SlidingWindow, Twitter: @kapilkhot Vendor Homepage: https://www.quest.com/products/kace-systems-management-appliance/ Affected Versions: KACE SMA versions prior to...
Dell KACE K1000 Command Injection Remote Code Execution
A remote code execution exists in KACE K1000 app server. This vulnerability is due to lack of input validation. Successful exploitation of this vulnerability could allow a remote attacker to execute code on the affected system...
DELL KACE K1000 File Upload Vulnerability
The Dell KACE K1000 is a system management solution. A file upload vulnerability exists in DELL KACE K1000. Allows execution of arbitrary code in the context of the 'www' user...
Dell KACE K1000 - Arbitrary File Upload (Metasploit)
Exploit for unix platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Dell KACE K1000 File Upload', 'Description' = %q This module exploits a...
Patch Management: Missing updates from Dell KACE K1000
Binary data dellkacek1000getmissingupdates.nbin...
Patch Management: Dell KACE K1000 Computer Info Initialization
Binary data dellkacek1000getcomputerinfo.nbin...
Patch Management: Dell KACE K1000 Report
Binary data dellkacek1000report.nbin...
Patch Management: Dell KACE K1000 Settings
Binary data dellkacek1000initinfo.nbin...
Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities
No description provided by source. Title: ====== Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities Date: ===== 2013-07-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=832 VL-ID: ===== 832 Common Vulnerability Scoring System:...
Dell KACE K1000 < 5.5.90547 / 5.4.76849 Arbitrary File Upload and Command Execution
The web interface for the version of the Dell KACE K1000 appliance on the remote host is affected by an arbitrary file upload vulnerability. With a specially crafted HTTP request, an attacker could upload a malicious script to the web server directory and use it to execute arbitrary commands with...
Dell KACE K1000 Systems Management Appliance 'LABEL_ID'参数跨站脚本漏洞
BUGTRAQ ID: 65333 CVECAN ID: CVE-2014-0330 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000系统管理设备5.5.90545版本及其他版本的adminui/userlist.php存在跨站脚本漏洞，远程攻击者可通过LABELID参数，利用此漏洞注入任意Web脚本或HTML。 0 Dell Kace 1000 Systems Management Appliance 5.5.90545 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Quest / Dell KACE K1000 Systems Management Appliance (SMA) <= 5.5.90545 XSS Vulnerability (SOL120154)
Quest / Dell KACE K1000 Systems Management Appliance SMA is prone to a cross-site scripting XSS vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
Dell KACE K1000 advisory_detail.php/ticket_list.php/ticket.php脚本SQL注入漏洞
CVECAN ID: CVE-2014-1671 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000 5.4.76847及更早版本存在多个SQL注入漏洞，远程攻击者或经过身份验证的远程用户通过service/kbotservice.php的getUploadPath或getKBot SOAP请求内的macAddress元素、userui/advisorydetail.php或userui/ticket.php的ID参数、userui/ticketlist.php的ORDER参数，利用这些漏洞即可执行任意SQL命令。 0 Dell Kace 1000...