CVE-2018-11145

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...

Command injection

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 20 of 46...

Command injection

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 27 of 46...

CVE-2018-11169

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 27 of 46...

CVE-2018-11170

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 28 of 46...

CVE-2018-11150

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 8 of 46...

CVE-2018-11193

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 5 of 6...

CVE-2018-11146

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 4 of 46...

CVE-2018-11151

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 9 of 46...

CVE-2018-11177

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 35 of 46...

CVE-2018-11145

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...

CVE-2018-11186

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 44 of 46...

“Appliance license expired” Displayed After Upgrading NetScaler SDX/VPX

The following message is displayed when you logon to NetScaler SDX/VPX UI after upgrading from any version to 12.1-48.13/ 12.0-58.15 : "Appliance license expired"...

Cambium ePMP SNMP Enumeration

Cambium devices ePMP, PMP, Force, & others can be administered using SNMP. The device configuration contains IP addresses, keys, and passwords, amongst other information. This module uses SNMP to extract Cambium ePMP device configuration. On certain software versions, specific device configuratio...

CVE-2018-8900

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

Design/Logic Flaw

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

gif2apng 1.9 - '.gif' Stack Buffer Overflow

Exploit Title: gif2apng 1.9 '.gif' Stack-Buffer Overflow Date: 20 April 2018 Exploit Author: Hamm3r.py Vendor Homepage: http://gif2apng.sourceforge.net/ Version: 1.9 Tested on: Ubuntu 16.04 CVE : gif2apng is vulnerable to a stack based buffer overflow when a malformed gif is supplied. Following i...

Input validation

A vulnerability in the support tunnel feature of Cisco Identity Services Engine ISE could allow an authenticated, local attacker to access the device's shell. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this vulnerability by tricking...

CVE-2017-0359

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...

Sophos UTM 9 Elevation of Privilege Vulnerability

Sophos UTM 9.4 is one of Sophos' offerings to deliver the next generation of advanced cloud service sandboxing technology. An elevation of privilege vulnerability exists in Sophos UTM version 9.410, which is exploited by authenticated remote attackers to elevate privileges...