CVE-2018-15659

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications. Cross-origin access is possible...

CVE-2018-15657

CVE-2018-15657 : A vulnerability in 42Gears SureMDM (pre-2018-11 patch) allows exploitation of the /api/DownloadUrlResponse.ashx?url parameter, enabling SS RF-like behavior and potential file disclosure via LFI/RFI. Multiple connected sources describe a local/remote file inclusion vector that can...

CVE-2018-15656

CVE-2018-15656 affects 42Gears SureMDM prior to 2018-11-27, where an attacker can issue a GET request to /api/register/:email with a base64-encoded email and an ApiKey header to determine whether a user account exists. The underlying issue is information disclosure through the registration endpoi...

CVE-2018-15655

CVE-2018-15655 concerns 42Gears SureMDM prior to 2018-11-27 with a CORS configuration issue allowing cross-origin access. The connected documents corroborate the same description; no further technical details, affected versions beyond the date, specific exploit paths, or remediation steps are pro...

CVE-2018-15659

42Gears SureMDM prior to 2018-11-27 is affected by CVE-2018-15659 due to an improper access policy for Silverlight applications, enabling cross-origin access. This vulnerability is documented in NVD with a described impact as cross-origin exposure; no exploit details are provided in the connected...

SureMDM Local / Remote File Inclusion

Exploit Title: SureMDM LFI/RFI Prior to 2018-11 Patch Google Dork: inurl:/api/DownloadUrlResponse.ashx Date: 2019-02-01 Exploit Author: Digital Interruption Vendor Homepage: https://www.42gears.com/ Software Link: https://www.42gears.com/products/suremdm-home/ Version: Versions prior to the...

SureMDM < 2018-11 Patch - Local / Remote File Inclusion Vulnerability

Exploit for windows platform in category web applications Exploit Title: SureMDM LFI/RFI Prior to 2018-11 Patch Google Dork: inurl:/api/DownloadUrlResponse.ashx Date: 2019-02-01 Exploit Author: Digital Interruption Vendor Homepage: https://www.42gears.com/ Software Link:...

SureMDM 2018-11 Patch - Local Remote File Inclusion

SureMDM 2018-11 Patch - Local Remote File Inclusion Exploit Title: SureMDM LFI/RFI Prior to 2018-11 Patch Google Dork: inurl:/api/DownloadUrlResponse.ashx Date: 2019-02-01 Exploit Author: Digital Interruption Vendor Homepage: https://www.42gears.com/ Software Link:...

SureMDM < 2018-11 Patch - Local / Remote File Inclusion

Exploit Title: SureMDM LFI/RFI Prior to 2018-11 Patch Google Dork: inurl:/api/DownloadUrlResponse.ashx Date: 2019-02-01 Exploit Author: Digital Interruption Vendor Homepage: https://www.42gears.com/ Software Link: https://www.42gears.com/products/suremdm-home/ Version: Versions prior to the...