CVE-2020-36927 DiskPulse 13.6.14 - Unquoted Service Path

DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe' to inject...

Denial of Service Vulnerability in Disk Pulse Enterprise Client Software

Disk Pulse Eneterprise is a software that monitors disk changes and can be connected to the software through an administration port 9120 or a web administration window 80. A denial of service vulnerability exists in the Disk Pulse Enterprise client software due to the diskpls.exe component servic...