14 matches found
EUVD-2020-22017
Malware in sbrugna...
EUVD-2018-2638
Malware in sbrugna...
CVE-2020-29659
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings= attack...
CVE-2020-29659
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...
Buffer overflow
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...
CVE-2020-29659
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...
PT-2020-17238 · Flexense · Dupscout Enterprise
Name of the Vulnerable Software and Affected Versions: Flexense DupScout Enterprise version 10.0.18 Description: A buffer overflow in the web server of Flexense DupScout Enterprise allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET...
CVE-2020-29659: Buffer Copy without Checking Size of Input
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...
Flexense DupScout 10.7 Cross Site Scripting
Description: URL: localhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense DupScout Version: from v10.0.18 to v10.7. Attack Type: Remote Impact: This attack allows an attacker...
CVE-2018-10566
XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7...
Cross site scripting
XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7...
CVE-2018-10566
The CVE refers to a Cross‑Site Scripting (XSS) vulnerability in Flexense DupScout Enterprise (versions 10.0.18 through 10.7). Public records indicate an XSS condition that could enable client‑side code execution and potential exposure of sensitive information or loss of control, with the affected...