PT-2017-3511

Name of the Vulnerable Software and Affected Versions Quest NetVault Backup version 11.2.0.13 Description This issue allows remote attackers to bypass authentication on vulnerable installations. The flaw exists within JSON RPC Request handling, specifically by setting the checksession parameter t...

PT-2017-3544

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUBackup PluginList method. This allows a remote attacker to execute arbitrary code by leveraging the la...

PT-2017-3542

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling ...

PT-2017-3545

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling ...

PT-2017-3567

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling ...

PT-2017-3572

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUBackupTargetSet Get method of the NetVault Backup software. This allows a remote attacker to execute...

PT-2017-3573

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The flaw exists within the handling of GET...

PT-2017-3541

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUJobDefinition Get method of the NetVault Backup software. This allows a remote attacker to execute...

PT-2017-3564

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling ...

PT-2017-3549

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling ...

PT-2017-3546

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling ...

PT-2017-3569

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUPhaseStatus GetPlugins method. This allows a remote attacker to execute arbitrary code on vulnerable...

PT-2017-3568

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUPhaseStatus Acknowledge method requests handling. This allows a remote attacker to execute arbitrary co...

PT-2017-3543

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup version 11.3.0.12 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling ...

PT-2017-3570

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUPhaseStatus Count method. This allows a remote attacker to execute arbitrary code by exploiting the la...

Dell Active Roles 7.x Unquoted Service Path Privilege Escalation Vulnerability

Dell Active Roles versions 7.1, 7.0.4, 7.0.3, 7.0.2, and 7.0 suffer from an unquoted service path privilege escalation vulnerability. Exploit Title: Dell Active Roles Unquoted Service Path Privilege Escalation Date: 16/06/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage:...

piratesquest.digitickets.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-407705 Description| Value ---|--- Affected Website:| piratesquest.digitickets.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Che...

questdiagnostics.com.mx XSS vulnerability

Vulnerable URL:...

Quest KACE Systems Management Appliance SQL Injection Vulnerability

Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, USA. A SQL injection vulnerability in the Quest KACE Asset Management Appliance allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain...

Quest / Dell KACE Systems Management Appliance (SMA) 6.4.120822 - 7.2.101 SQLi Vulnerability

An SQL injection SQLi exists in Quest / Dell KACE Systems Management Appliance SMA. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...