EUVD-2018-2637

Malware in sbrugna...

Flexense Disksavvy 10.7 Cross Site Scripting

Description: URL: localhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense Disksavvy Version: from v10.4 to v10.7. Attack Type: Remote Impact: This attack allows an attacker co...

Flexense DiskSavvy Enterprise Cross-Site Scripting Vulnerability

Flexense DiskSavvy Enterprise is a disk space usage analyzer from Flexense Canada. The product is capable of analyzing disks, network shares, NAS devices and enterprise storage systems. A cross-site scripting vulnerability exists in Flexense DiskSavvy Enterprise versions 10.4 through 10.7. A remo...

CVE-2018-10565

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

Cross site scripting

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

CVE-2018-10565

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

CVE-2018-10565

CVE-2018-10565 affects Flexense DiskSavvy Enterprise (vendor Flexense Canada) versions 10.4 through 10.7 with a cross-site scripting (XSS) vulnerability. The publicly connected sources describe a remote XSS issue that could allow an attacker to execute code in the context of the user session, pot...

CVE-2018-10565

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

PT-2018-9963

Name of the Vulnerable Software and Affected Versions: DiskSavvy Enterprise versions 10.4 through 10.7 Description: A cross-site scripting XSS issue exists. Recommendations: For versions 10.4 through 10.7, update to a version that contains a fix for this issue...

CVE-2018-10565: Improper Neutralization of Input During Web Page Generation

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

SysGauge Pro 4.6.12 - Local Buffer Overflow (SEH)

SysGauge Pro 4.6.12 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : SysGauge Pro v4.6.12 - Local Buffer Overflow SEH Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.sysgauge.com/ Vulnerable Software :...

web server of the Privilege Escalation

The vulnerability of the web server software for synchronizing SyncBreeze files, the software for detecting file duplicates DupScout, the disk space analyzer DiskSavvy, and the software for monitoring changes on hard drives DiskPulse is caused by buffer overflows. Exploiting this vulnerability ca...

PT-2017-3510

Name of the Vulnerable Software and Affected Versions DiskPulse versions 9.9.16 and earlier DiskSavvy versions 9.9.14 and earlier DupScout versions 9.9.14 and earlier SyncBreeze versions 9.9.16 and earlier Description The issue is caused by a buffer overflow in the web server component of the...

Disk Savvy Enterprise 9.9.14 Buffer Overflow

!/usr/bin/env python Exploit Title: Disk Savvy Enterprise 9.9.14 Remote SEH Buffer Overflow Date: 2017-08-25 Exploit Author: Nipun Jaswal & Anurag Srivastava Author Homepage: www.pyramidcyber.com Vendor Homepage: http://www.disksavvy.com Software Link:...

CVE-2017-7310

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a lo...

CVE-2017-7310

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a lo...

CVE-2017-7310

CVE-2017-7310 is a buffer overflow in the Import Command of Flexense products (SyncBreeze Enterprise, Disk Sorter Enterprise Client, DiskBoss Enterprise Client, DiskPulse, DiskSavvy, DupScout, VX Search) prior to version 10.6 (DiskPulse/DupScout/Sync Breeze variants noted in multiple advisories)....

PT-2017-17655

Name of the Vulnerable Software and Affected Versions SyncBreeze versions prior to 10.6 DiskSorter versions prior to 10.6 DiskBoss versions prior to 8.9 DiskPulse versions prior to 10.6 DiskSavvy versions prior to 10.6 DupScout versions prior to 10.6 VX Search versions prior to 10.6 Description A...

CVE-2017-7310: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a lo...

DiskSavvy Enterprise Buffer Overflow Vulnerability

Flexense DiskSavvy is a disk space analyzer from Flexense USA. A buffer overflow vulnerability exists in the build-in web server of Flexense DiskSavvy Enterprise. A remote attacker could exploit the vulnerability to send a specially crafted URI request to conduct a denial of service or arbitrary...