CVE-2018-10563

An XSS in Flexense SyncBreeze affects all versions tested from SyncBreeze Enterprise from v10.1 to v10.7...

CVE-2018-10565

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

CVE-2018-10294

Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS...

CVE-2018-10564

XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7...

CVE-2018-10568

XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7...

CVE-2018-10567

Flexense VX Search Enterprise is affected by a Cross-Site Scripting (XSS) vulnerability in versions 10.1.12 through 10.7. The CVE details indicate the issue exists in this product line, and multiple connected sources corroborate the same affected version range. The precise root cause is not descr...

CVE-2018-10565

CVE-2018-10565 affects Flexense DiskSavvy Enterprise (vendor Flexense Canada) versions 10.4 through 10.7 with a cross-site scripting (XSS) vulnerability. The publicly connected sources describe a remote XSS issue that could allow an attacker to execute code in the context of the user session, pot...

CVE-2018-10294

Flexense DiskBoss Enterprise (versions 7.4.28–9.1.16) is affected by a cross-site scripting (XSS) vulnerability. The CVE entry CVE-2018-10294 is supported by multiple connected sources (CNVD-2018-09174, CVE records, and packetstorm disclosures) indicating a remote XSS in DiskBoss Enterprise. Impa...

CVE-2018-10568

Summary: CVE-2018-10568 is a Cross-Site Scripting (XSS) vulnerability affecting Flexense DiskSorter Enterprise versions 9.5.12 through 10.7. The connected CNVD entry explicitly describes an XSS vulnerability that could lead to sensitive information exposure or loss of control of the host. Public ...

Flexense DiskPulse 10.7 Cross Site Scripting

Description: URL: localhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense DiskPulse Version: from v10.4 to v10.7. Attack Type: Remote Impact: This attack allows an attacker co...

Flexense SyncBreeze 10.7 Cross Site Scripting

Description: URL: l ocalhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense- SyncBreeze Version: from v10.1 to v10.7 Attack Type: Remote Impact: This attack allows an attacker...

SysGauge Pro 4.6.12 - Local Buffer Overflow (SEH)

SysGauge Pro 4.6.12 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : SysGauge Pro v4.6.12 - Local Buffer Overflow SEH Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.sysgauge.com/ Vulnerable Software :...

SysGauge Pro 4.6.12 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title : SysGauge Pro v4.6.12 - Local Buffer Overflow SEH Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.sysgauge.com/ Vulnerable Software : http://www.sysgauge.com/setups/sysgaugeprosetupv4.6.12.exe...

Design/Logic Flaw

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

CVE-2018-8065

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

CVE-2018-8065

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

Flexense SyncBreeze Enterprise Denial of Service Vulnerability

Flexense SyncBreeze Enterprise is a set of file synchronization tools from Flexense Canada. The tool has file management and data synchronization features. web server is one of the web server. A security vulnerability exists in the web server in Flexense SyncBreeze Enterprise version 10.6.24. The...

CVE-2018-8065

CVE-2018-8065 affects Flexense SyncBreeze Enterprise 10.6.24 and earlier, where the web server component (syncbrs.exe) is vulnerable to a user‑mode write access memory violation triggered by sending requests with long HTTP headers or long URIs. The issue enables a Denial of Service condition, wit...

Buffer overflow

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise serv...

CVE-2017-17996

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise serv...