Lucene search
+L

217 matches found

Packet Storm
Packet Storm
•added 2023/03/27 12:00 a.m.•166 views

Sysax Multi Server 6.95 Denial Of Service

Exploit Title: Sysax Multi Server 6.95 - 'Password' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2022-10-05 Vendor Homepage: https://www.sysax.com/ Software Link: https://www.sysax.com/download/sysaxservsetup.msi Tested Version: 6.95 Vulnerability Type: Denial of Service DoS...

6.8AI score
SaveExploits0
zdt
zdt
•added 2023/03/27 12:00 a.m.•206 views

Sysax Multi Server 6.95 - (Password) Denial of Service Exploit

Exploit Title: Sysax Multi Server 6.95 - 'Password' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://www.sysax.com/ Software Link: https://www.sysax.com/download/sysaxservsetup.msi Tested Version: 6.95 Vulnerability Type: Denial of Service DoS Local Tested on OS: Windows...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2023/03/27 12:00 a.m.•181 views

Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

Exploit Title: Sysax Multi Server 6.95 - 'Password' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2022-10-05 Vendor Homepage: https://www.sysax.com/ Software Link: https://www.sysax.com/download/sysaxservsetup.msi Tested Version: 6.95 Vulnerability Type: Denial of Service DoS...

5.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/01/28 12:00 a.m.•7 views

PT-2023-13521 · Unknown · Lemonldap::Ng

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.0.15 Description: The issue occurs when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically, resulting in some sessions not bein...

7.5CVSS7.8AI score0.00774EPSS
SaveExploits2References21
OSV
OSV
•added 2022/08/24 3:00 a.m.•24 views

USN-5576-1 twisted vulnerability

It was discovered that Twisted incorrectly parsed some types of HTTP requests in its web server implementation. In certain proxy or multi-server configurations, a remote attacker could craft malicious HTTP requests in order to obtain sensitive information...

8.1CVSS7.3AI score0.028EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2021/07/12 9:30 p.m.•1214 views

DcRat - A Simple Remote Tool Written In C#

DcRat is a simple remote tool written in C Introduction Features TCP connection with certificate verification, stable and security Server IP port can be archived through link Multi-Server,multi-port support Plugin system through Dll, which has strong expansibility Super tiny client size about 405...

7.6AI score
SaveExploits0References11
OSV
OSV
•added 2020/09/15 2:15 p.m.•14 views

CVE-2020-16096

In Gallagher Command Centre versions 8.10 prior to 8.10.1134MR4, 8.00 prior to 8.00.1161MR5, 7.90 prior to 7.90.991MR5, 7.80 prior to 7.80.960MR2, 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be or is attached to a multi-server...

7.7CVSS7.1AI score0.008EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/15 2:15 p.m.•24 views

Command injection

In Gallagher Command Centre versions 8.10 prior to 8.10.1134MR4, 8.00 prior to 8.00.1161MR5, 7.90 prior to 7.90.991MR5, 7.80 prior to 7.80.960MR2, 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be or is attached to a multi-server...

4CVSS7.4AI score0.008EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/15 1:24 p.m.•39 views

CVE-2020-16096

In Gallagher Command Centre versions 8.10 prior to 8.10.1134MR4, 8.00 prior to 8.00.1161MR5, 7.90 prior to 7.90.991MR5, 7.80 prior to 7.80.960MR2, 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be or is attached to a multi-server...

9.9CVSS9.4AI score0.008EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/15 12:00 a.m.•5 views

CVE-2020-16096: Improper Authorization

In Gallagher Command Centre versions 8.10 prior to 8.10.1134MR4, 8.00 prior to 8.00.1161MR5, 7.90 prior to 7.90.991MR5, 7.80 prior to 7.80.960MR2, 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be or is attached to a multi-server...

9.9CVSS5.7AI score0.008EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/08/20 12:00 a.m.•18 views

Codeorigin Sysax Multi Server Denial of Service Vulnerability

Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows from Codeorigin USA. A cross-site scripting vulnerability exists in Codeorigin Sysax Multi Server version 6.90. The vulnerability stems from the WEB application's lack of proper validation of client...

6.5CVSS6.2AI score0.0095EPSS
SaveExploits1References1
OSV
OSV
•added 2020/08/19 4:15 p.m.•15 views

CVE-2020-23574

When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfilename1.htm form to a length of 368 or more bytes. This will create a buffer overflow condition, causing the application to crash...

6.5CVSS6.9AI score0.0095EPSS
SaveExploits1References1
Prion
Prion
•added 2020/08/19 4:15 p.m.•20 views

Buffer overflow

When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfilename1.htm form to a length of 368 or more bytes. This will create a buffer overflow condition, causing the application to crash...

4CVSS6.6AI score0.0095EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/08/19 3:16 p.m.•28 views

CVE-2020-23574

When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfilename1.htm form to a length of 368 or more bytes. This will create a buffer overflow condition, causing the application to crash...

6.7AI score0.0095EPSS
SaveExploits1References1
CVE
CVE
•added 2020/08/19 3:16 p.m.•61 views

CVE-2020-23574

Sysax Multi Server 6.90 is affected. An authenticated user can modify the filename="" parameter in the uploadfile_name1.htm upload form to reach 368+ bytes, triggering a buffer overflow that causes the application to crash. Root cause is a overflow in handling long filenames during file upload. N...

6.5CVSS6.6AI score0.0095EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/19 12:00 a.m.•3 views

CVE-2020-23574: Improper Restriction of Operations within the Bounds of a Memory Buffer

When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfilename1.htm form to a length of 368 or more bytes. This will create a buffer overflow condition, causing the application to crash...

6.5CVSS6AI score0.0095EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/06/03 12:00 a.m.•14 views

Codeorigin Sysax Multi Server Authorization Issues Vulnerability

Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows from Codeorigin USA. An authorization issue vulnerability exists in Codeorigin Sysax Multi Server version 6.90. The vulnerability can be exploited by an attacker to access other user sessions with t...

8.8CVSS6.8AI score0.01607EPSS
SaveExploits2References1
NVD
NVD
•added 2020/06/02 2:15 p.m.•31 views

CVE-2020-13228

An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter...

6.1CVSS6AI score0.03075EPSS
SaveExploits5References4
NVD
NVD
•added 2020/06/02 2:15 p.m.•24 views

CVE-2020-13229

An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is an authentication token...

8.8CVSS8.8AI score0.01607EPSS
SaveExploits2References2
OSV
OSV
•added 2020/06/02 2:15 p.m.•15 views

CVE-2020-13229

An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is an authentication token...

8.8CVSS7.3AI score0.01607EPSS
SaveExploits2References2
Rows per page
Query Builder