CVE-2018-10565

XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7...

CVE-2018-10566

The CVE refers to a Cross‑Site Scripting (XSS) vulnerability in Flexense DupScout Enterprise (versions 10.0.18 through 10.7). Public records indicate an XSS condition that could enable client‑side code execution and potential exposure of sensitive information or loss of control, with the affected...

CVE-2018-10563

Flexense SyncBreeze Enterprise (file synchronization tool) contains a cross-site scripting vulnerability affecting versions 10.1 through 10.7. The issue enables a remote attacker to execute script in the user context, potentially exposing sensitive data or taking control of the user’s system. No ...

CVE-2018-10294

Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS...

CVE-2018-10566

XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7...

CVE-2018-10568

Summary: CVE-2018-10568 is a Cross-Site Scripting (XSS) vulnerability affecting Flexense DiskSorter Enterprise versions 9.5.12 through 10.7. The connected CNVD entry explicitly describes an XSS vulnerability that could lead to sensitive information exposure or loss of control of the host. Public ...

CVE-2018-10564

CVE-2018-10564 is a cross-site scripting vulnerability in Flexense DiskPulse Enterprise, affecting versions 10.4 through 10.7. The connected CNVD/NVD entries describe an XSS flaw that could allow a remote attacker to execute code in the victim’s context and potentially obtain sensitive informatio...

CVE-2018-10563

An XSS in Flexense SyncBreeze affects all versions tested from SyncBreeze Enterprise from v10.1 to v10.7...

CVE-2018-10567

XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7...

Flexense SyncBreeze 10.7 Cross Site Scripting

Description: URL: l ocalhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense- SyncBreeze Version: from v10.1 to v10.7 Attack Type: Remote Impact: This attack allows an attacker...

Flexense DiskPulse 10.7 Cross Site Scripting

Description: URL: localhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense DiskPulse Version: from v10.4 to v10.7. Attack Type: Remote Impact: This attack allows an attacker co...

SysGauge Pro 4.6.12 - Local Buffer Overflow (SEH)

SysGauge Pro 4.6.12 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : SysGauge Pro v4.6.12 - Local Buffer Overflow SEH Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.sysgauge.com/ Vulnerable Software :...

SysGauge Pro 4.6.12 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title : SysGauge Pro v4.6.12 - Local Buffer Overflow SEH Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.sysgauge.com/ Vulnerable Software : http://www.sysgauge.com/setups/sysgaugeprosetupv4.6.12.exe...

CVE-2018-8065

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

CVE-2018-8065

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

Design/Logic Flaw

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...

CVE-2018-8065

CVE-2018-8065 affects Flexense SyncBreeze Enterprise 10.6.24 and earlier, where the web server component (syncbrs.exe) is vulnerable to a user‑mode write access memory violation triggered by sending requests with long HTTP headers or long URIs. The issue enables a Denial of Service condition, wit...

Flexense SyncBreeze Enterprise Denial of Service Vulnerability

Flexense SyncBreeze Enterprise is a set of file synchronization tools from Flexense Canada. The tool has file management and data synchronization features. web server is one of the web server. A security vulnerability exists in the web server in Flexense SyncBreeze Enterprise version 10.6.24. The...

Buffer overflow

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise serv...

CVE-2017-17996

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise = 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise serv...