Quest NetVault Backup Server Detection

Binary data netvaultwebdetect.nbin...

Quest NetVault Backup Server < 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability (ZDI-17-982)

The version of Quest NetVault Backup Server running on the remote host is prior to 11.4.5. It is, therefore, affected by an SQL injection SQLi remote code execution vulnerability in the process manager server due to improper validation of user-supplied input. An unauthenticated, remote attacker c...

(0Day) Quest KACE Systems Management download_file Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Quest KACE Systems Management. Authentication is required to exploit this vulnerability. The specific flaw exists within the access control of the downloadfile page. This allows a guest use...

(0Day) Quest KACE Systems Management run_cross_report ID SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Quest KACE Systems Management. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the ID parameter provided to the runcrossreport page...

(0Day) Quest KACE Systems Management run_report Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest KACE Systems Management. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the ID and FMT parameters provided to the runreport page. Th...

(0Day) Quest KACE Systems Management replshare farray SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Quest KACE Systems Management. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the PLATFORMLIST parameter provided to the replshare...

Quest KACE Systems Management run_report SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Quest KACE Systems Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the ID parameter provided to the runreport page...

kidsquest.com XSS vulnerability

Open Bug Bounty ID: OBB-660313 Description| Value ---|--- Affected Website:| kidsquest.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cross-quest-wiki.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-648014 Description| Value ---|--- Affected Website:| cross-quest-wiki.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Zero-Day Coverage Update – Week of July 2, 2018

The General Data Protection Regulation GDPR has been up and running for a couple of months now and your organization is compliant. It’s time to take a little break – well, not so fast! Late last week, the State of California passed a new data privacy law called the California Consumer Privacy Act...

Quest KACE Systems Management - Command Injection (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Quest KACE Systems Management Command Injection', 'Description' = %q This module exploits a command injection vulnerability in Quest KACE Systems...

Quest KACE Systems Management - Command Injection Exploit

Exploit for unix platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Quest KACE Systems Management Command Injection', 'Description' = %q This module exploits a...

Quest KACE Systems Management Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Quest KACE Systems Management Command Injection', 'Description' = %q This module exploits a command injection vulnerability in Quest KACE Systems...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15880)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Add Storage" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15887)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Duplicates" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15617)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the get usage method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15621)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the customer portal register method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute system commands via specially crafted...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15625)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setBandwidthLimit method in Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15630)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the rescanreplicaVTLcontainer method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands via the container name...

Quest DR Series Disk Backup Software Command Injection Vulnerability

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Stop Replication" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...