EMC AlphaStor Device Manager - Opcode 0x72 Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'EMC AlphaStor Device Manager Opcode 0x72', 'Description' = %q This module exploits a stack based buffer overflow vulnerability found in EMC Alphastor Device Manager. The overflow is triggered when sending a specially crafted packet to the rrobotd.exe...

EMC AlphaStor Library Manager Opcode 0x4f Buffer Overflow

require 'msf/core' class MetasploitModule 'EMC AlphaStor Library Manager Opcode 0x4f', 'Description' = %q This module exploits a stack based buffer overflow found in EMC Alphastor Library Manager version 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL',...

EMC CMCNE Inmservlets.war FileUploadController 11.2.1 - Remote Code Execution (Metasploit)

require 'msf/core' class MetasploitModule 'EMC CMCNE Inmservlets.war FileUploadController Remote Code Execution', 'Description' = %q This module exploits a file upload vulnerability found in EMC Connectrix Manager Converged Network Edition 'james fitts' , 'License' = MSFLICENSE, 'References' =...

EMC CMCNE 11.2.1 - FileUploadController Remote Code Execution (Metasploit)

require 'msf/core' class MetasploitModule 'EMC CMCNE FileUploadController Remote Code Execution', 'Description' = %q This module exploits a fileupload vulnerability found in EMC Connectrix Manager Converged Network Edition MSFLICENSE, 'Author' = 'james fitts' , 'References' = 'ZDI', '13-279' ,...

EMC CMCNE 11.2.1 - FileUploadController Remote Code Execution (Metasploit)

EMC CMCNE 11.2.1 - FileUploadController Remote Code Execution Metasploit require 'msf/core' class MetasploitModule 'EMC CMCNE FileUploadController Remote Code Execution', 'Description' = %q This module exploits a fileupload vulnerability found in EMC Connectrix Manager Converged Network Edition...

EMC CMCNE Inmservlets.war FileUploadController 11.2.1 - Remote Code Execution Exploit

Exploit for java platform in category remote exploits require 'msf/core' class MetasploitModule 'EMC CMCNE Inmservlets.war FileUploadController Remote Code Execution', 'Description' = %q This module exploits a file upload vulnerability found in EMC Connectrix Manager Converged Network Edition...

EMC CMCNE Inmservlets.war FileUploadController 11.2.1 - Remote Code Execution (Metasploit)

EMC CMCNE Inmservlets.war FileUploadController 11.2.1 - Remote Code Execution Metasploit require 'msf/core' class MetasploitModule 'EMC CMCNE Inmservlets.war FileUploadController Remote Code Execution', 'Description' = %q This module exploits a file upload vulnerability found in EMC Connectrix...

EMC CMCNE 11.2.1 - FileUploadController Remote Code Execution Exploit

Exploit for java platform in category remote exploits require 'msf/core' class MetasploitModule 'EMC CMCNE FileUploadController Remote Code Execution', 'Description' = %q This module exploits a fileupload vulnerability found in EMC Connectrix Manager Converged Network Edition MSFLICENSE, 'Author'...

Sql injection

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync (pre-3.5) contains an SQL injection in the Apollo REST services. The flaw arises when parsing a user-supplied string to build SQL queries, enabling information disclosure on vulnerable installations. The vulnerability allows remote attackers to disclose sensitive data; authentication ...

CVE-2017-8015: Improper Neutralization of Special Elements used in an SQL Command

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

EMC AppSync Apollo REST Services SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Appsync. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within Apollo REST...

PT-2017-18068

Name of the Vulnerable Software and Affected Versions EMC AppSync versions prior to 3.5 Description The issue concerns a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system. Recommendations For versions prior to 3.5, update to versi...

EMC AppSync SQL Injection Vulnerability

EMC AppSync is a suite of data protection software from EMC Corporation USA. The software provides simple, self-service, service-level agreement SLA-driven data protection and storage management for EMC VNX and EMC VMAX storage. A SQL injection vulnerability exists in versions of EMC AppSync prio...

EMC Data Protection Advisor ReportQueueResource orderby SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Data Protection Advisor. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within...

EMC Data Protection Advisor BaseRestEntityResource orderby SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Data Protection Advisor. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within...

EMC Data Protection Advisor ScheduledReportResource Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Data Protection Advisor. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within...