Symantec Workspace Streaming Agent 'AppMgrService.exe' Local Elevation of Privilege Vulnerability

Symantec Workspace Streaming enables on-demand application setup, real-time software license management, and instant application upgrades. A local elevation of privilege vulnerability exists in the Symantec Workspace Streaming Agent implementation of 'AppMgrService.exe'. An attacker could exploit...

Windows exposure“redirect SMB”vulnerability, the impact of Win10, including all versions-bug warning-the black bar safety net

Recently Cylance company released a Windows System to serious vulnerability, the attacker via the exploit can steal user authentication information. The vulnerability includes the latest Windows 1 0 preview version, including all versions of Windows, as well as Adobe, Apple, Box, Oracle, Symantec...

Symantec Workspace Streaming Agent Unquoted Service Path Local Elevation of Privilege

SUMMARY Symantec Workspace Streaming agents have an unquoted search path in the AppMgrService.exe which is installed as a service. This could potentially provide a non-privileged local user the ability to successfully insert arbitrary code in the root path. AFFECTED PRODUCTS Product | Version |...

Symantec Web Gateway OS Command Injection (CVE-2014-7285; CVE-2016-5313)

A remote command execution vulnerability has been reported in Symantec Web Gateway. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious HTTP request containing a specially crafted parameter to the target server...

Symantec Web Gateway Login Utility

This module will attempt to authenticate to a Symantec Web Gateway. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/symantecwebgateway' require...

CVE-2015-1483

Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors...

Design/Logic Flaw

Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors...

CVE-2015-1483

Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors...

CVE-2015-1483

CVE-2015-1483 affects Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux/UNIX. The vulnerability allows remote attackers to execute arbitrary JavaScript code via unspecified vectors. The sources in the connected set confirm the affected product/version and the impact, but do not provide ...

Symantec NetBackup OpsCenter Arbitrary Code Execution Vulnerability

Symantec NetBackup OpsCenter is a unified data protection management software from Symantec Symantec. The software allows centralized monitoring and reporting of the operational status of heterogeneous data protection environments through a console. A security vulnerability exists in Symantec...

Symantec Web Gateway 5 - 'restore.php' (Authenticated) Command Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Symantec Web Gateway 5 restore.php Post Authentication Command Injection", 'Description' = %q This module exploits a command injecti...

Symantec Deployment Solution Client Service Installed

Binary data symantecdsclientservicedetect.nbin...

Symantec Deployment Solution AClient <= 6.9 Buffer Overflow

The Symantec Deployment Solution AClient installed on the remote host is version 6.9 or prior. It is, therefore, affected by a buffer overflow vulnerability that is triggered when handling an IOCTL. A local attacker can exploit this to gain elevated privileges. C Tenable Network Security, Inc...

Symantec Web Gateway 5 restore.php Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Symantec Web Gateway 5 restore.php Post Authentication Command Injection", 'Description' = %q This module exploits a command injecti...

Symantec Web Gateway 5 restore.php Command Injection Exploit

This Metasploit module exploits a command injection vulnerability found in Symantec Web Gateway's setting restoration feature. The filename portion can be used to inject system commands into a syscall function, and gain control under the context of HTTP service. For Symantec Web Gateway 5.1.1, yo...

Symantec Encryption Management Server Database Backup Command Injection (CVE-2014-7288)

A command-injection vulnerability has been reported in Symantec Encryption Management Server. The vulnerability is due to insufficient sanitization of user-supplied input when processing database backup commands from the Web UI. A remote, authenticated attacker could exploit this vulnerability by...

Symantec Data Center Security Server 'WCUnsupportedClass.jsp' XSS

The remote Symantec Data Center Security Server running on the remote host is affected by a reflected cross-site scripting vulnerability due to improper validation of input to the 'classname' parameter in the 'WCUnsupportedClass.jsp' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Symantec Data Center Security Server 'SSO-Error.jsp' XSS (SYM15-001)

The remote Symantec Data Center Security Server running on the remote host is affected by a reflected cross-site scripting vulnerability due to improper validation of input to the 'ErrorMsg' parameter in the '/webui/Khakidocs/SSO-Error.jsp' script. %NASLMINLEVEL 70300 C Tenable Network Security,...

Symantec Data Center Security Server SQLi (SYM15-001)

The remote Symantec Data Center Security Server running on the remote host is affected by a SQL injection vulnerability in the '/sis-ui/authenticate' script on the web console interface. A remote attacker, using a crafted HTTP request, can exploit this to execute SQL queries, allowing the...

Symantec Data Center Security Server 'environment.jsp' Information Disclosure (SYM15-001)

The remote Symantec Data Center Security Server running on the remote host is affected by an information disclosure vulnerability in the '/webui/admin/environment.jsp' script, which discloses sensitive information about the server and software configuration. %NASLMINLEVEL 70300 C Tenable Network...