Disk Pulse 9.7.26 - 'Add Directory' Local Buffer Overflow

!/usr/bin/python Exploit Title: Disk Pulse v9.7.26 - Add Directory Local Buffer Overflow Date: 12-06-2017 Exploit Author: abatchy17 -- @abatchy17 Vulnerable Software: Disk Pulse v9.7.26 Freeware, Pro, Ultimate Vendor Homepage: http://www.diskpulse.com/ Version: 9.7.14 Software Link:...

Disk Pulse Enterprise Server HttpParser Buffer Overflow

A buffer overflow vulnerability has been reported in the web server component of Disk Pulse Enterprise Server. The vulnerability is due to a failure on part of the application to implement proper bounds checking on components found in HTTP requests. A remote, unauthenticated attacker could exploi...

Apache Geode Information Disclosure Vulnerability

Geode is a data management platform that provides real-time, consistent access to data-critical applications across the entire cloud architecture. Apache Geode sets the security-manager attribute and fails to set user permissions correctly after enabling clustering, allowing remote attackers to...

Information Disclosure

Geode-pulse is vulnerable to information disclosure. A malicious user that does not have DATA:READ permissions on a cluster but has CLUSTER:READ permissions on a cluster can access the data browser page in Pulse, allowing them to execute an OQL query to expose sensitive data in the cluster...

CVE-2017-5649

CVE-2017-5649 affects Apache Geode prior to 1.1.1. When a cluster has security-manager enabled, remote authenticated users with CLUSTER:READ but not DATA:READ can access the data browser page in Pulse and run an OQL query, exposing data stored in the cluster. The vulnerability is demonstrated by ...

Disk Pulse Enterprise Buffer Overflow Vulnerability

Disk Pulse Enterprise is a real-time disk monitoring utility that allows users to monitor one or more disks or directories, providing detailed information about the computer's disks, which can be used to analyze whether they are running abnormally or not, thus helping users to manage their disks...

Disk Pulse Enterprise Server Buffer Overflow Vulnerability

Disk Pulse Enterprise Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Disk Pulse Enterprise 9.1.16 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Pulse Enterprise 9.1.16 Login Buffer Overflow" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM...

Disk Pulse Enterprise 9.0.34 - 'Login' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Disk Pulse Enterprise Login Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in Disk Pulse...

Disk Pulse Enterprise remote code execution vulnerability

Vulnerability reproduction Disk Pulse Eneterprise is a monitoring disk changes the software, it can be through a management port 9120 or the web Management window 80 on software for connection management, which monitors the disk changes. In Disk Pulse Eneterprise中有一个动态链接库libspp.dll, some of which...

Disk Pulse Enterprise Server Version Detection

Detects the installed version of Disk Pulse Enterprise Server. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Disk Pulse Enterprise Server Buffer Overflow Vulnerability

Disk Pulse Enterprise Server is prone to a buffer overflow vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Disk Pulse Enterprise 9.0.34 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Pulse Enterprise 9.0.34 Buffer Overflow Exploit" print "Author: Tulpa // tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpa-security.com Exploit will land you NT...

Monthly Usage Report (X Days Left)

Challenge BEM displays "Please submit a monthly usage report x days left" after submitting usage report Cause There are a few scenarios that can produce this message, detailed below in solutions: Solution 1. Partner has submitted a spreadsheet containing monthly usage report information to 2...

CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

Design/Logic Flaw

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

CVE-2016-2408

CVE-2016-2408 is a client‑side elevation of privilege in Pulse Secure components on Windows. Concrete details from connected docs show exploitable to restricted users via the Pulse Secure Desktop Client and the Standalone Installer Service, with affected versions including: Pulse Secure Desktop C...

Pulse Secure Desktop Client Elevation of Privilege Vulnerability

Pulse Secure Desktop Client provides a secure and trusted connection for end devices accessing the Pulse Secure gateway. The system service installed by Pulse Secure Desktop Client has a security vulnerability in the access control settings. By emulating a trusted process communicating with this...