EUVD-2017-9138

Malware in sbrugna...

CVE-2018-8065

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

Flexense SyncBreeze Enterprise Denial of Service Vulnerability

Flexense SyncBreeze Enterprise is a set of file synchronization tools from Flexense Canada. The tool has file management and data synchronization features. web server is one of the web server. A security vulnerability exists in the web server in Flexense SyncBreeze Enterprise version 10.6.24. The...

CVE-2018-8065: Improper Input Validation

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

CVE-2018-8065

CVE-2018-8065 affects Flexense SyncBreeze Enterprise 10.6.24 and earlier, where the web server component (syncbrs.exe) is vulnerable to a user‑mode write access memory violation triggered by sending requests with long HTTP headers or long URIs. The issue enables a Denial of Service condition, wit...

Buffer overflow

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise serv...

CVE-2017-17996

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise serv...

CVE-2017-17996: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise serv...

CVE-2018-6537

Flexense SyncBreeze Enterprise 10.4.18 is affected by a buffer overflow in the control protocol. The vulnerability allows remote code execution when an attacker sends a crafted packet to TCP port 9121. Reported details indicate the flaw is exploitable remotely without authentication, leading to p...

CVE-2018-6537: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9121...

Flexense SyncBreeze Enterprise 10.3.14 Buffer Overflow

Hi List, Description: A buffer overflow vulnerability in "Add command" functionality exists in Flexenseas SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the...

CVE-2017-17099: Improper Restriction of Operations within the Bounds of a Memory Buffer

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under th...

PT-2017-14711

Name of the Vulnerable Software and Affected Versions Flexense SyncBreeze Enterprise version 10.1.16 Description The issue is related to an unauthenticated SEH based Buffer Overflow in the HTTP server. It can be triggered by sending a GET request with an excessive length, allowing a malicious use...

CVE-2017-15950

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode...

CVE-2017-15950: Improper Restriction of Operations within the Bounds of a Memory Buffer

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode...

PT-2017-14308

Name of the Vulnerable Software and Affected Versions Flexense SyncBreeze Enterprise version 10.1.16 Description The issue is related to a buffer overflow that can be exploited for arbitrary code execution. This is triggered by providing a long input into the Destination directory field, either...