12 matches found
diskpulse-poc
diskpulse-poc Exploit for OSED prep on DiskPulse Enter...
CVE-2020-36927
DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe' to inject...
CVE-2020-36927: Unquoted Search Path or Element
DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe' to inject...
Flexense DiskPulse Enterprise security vulnerabilities
Flexense DiskPulse Enterprise is a centralized report database server offered by Flexense DiskPulse Corporation. Version 13.6.14 of Flexense DiskPulse Enterprise contains a security vulnerability. This vulnerability stems from the use of service paths without quotes in Windows service...
CVE-2020-36927 DiskPulse 13.6.14 - Unquoted Service Path
DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe' to inject...
CVE-2020-36927
DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe' to inject...
EUVD-2018-2636
Malware in sbrugna...
Flexense DiskPulse Enterprise security vulnerabilities
Flexense DiskPulse Enterprise is a centralized reporting database server from Flexense DiskPulse. A security vulnerability exists in Flexense DiskPulse Enterprise version 9.0.34, which stems from improper boundary checking of the login function and could result in a stack buffer overflow...
Flexense DiskPulse Enterprise Cross-Site Scripting Vulnerability
Flexense DiskPulse Enterprise is a real-time disk change monitoring solution from Flexense Canada. The solution supports monitoring multiple disks or directories and exporting disk change monitoring statistics to a centralized SQL database. A cross-site scripting vulnerability exists in Flexense...
CVE-2018-10564
XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7...
PT-2018-9962
Name of the Vulnerable Software and Affected Versions: DiskPulse Enterprise versions 10.4 through 10.7 Description: A cross-site scripting issue exists, potentially allowing for malicious script execution. Recommendations: For versions 10.4 through 10.7, update to a version later than 10.7 to...