EUVD-2020-30823

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field...

CVE-2020-36879 Flexsense DiskBoss Service Unquoted Service Path Vulnerability

Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escalated privileges. Attackers can exploit the unquoted service path vulnerability by specifying a malicious service nam...

PT-2025-49293

Name of the Vulnerable Software and Affected Versions Flexsense DiskBoss version 7.7.14 Description An unauthenticated attacker can upload arbitrary files through the /Command/Search Files/Directory field. This can lead to a denial of service by crashing the application. The vulnerable parameter ...