23 matches found
Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upl — Detect
Fingerprint / reachability check for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upload Branch CWE-22 Leading to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLin...
Syncrify PublicLink chunk upload traversal cron root RCE
Backup user PublicLink auth then binary chunk upload st=u with traversing chunk name writes /etc/cron.d/. """Syncrify PublicLink chunk upload path traversal cron root RCE.""" from future import annotations import re import struct import time from urllib.parse import quote from kittysploit import...
Synametrics Syncrify 6.2 Build 1178 PublicLink Path Traversal / Root Command Execution
Synametrics Syncrify version 6.2 build 1178 contains a path traversal issue in the PublicLink chunk-upload handler. An authenticated backup user can write a cron fragment outside the intended upload directory, resulting in root command execution when the service runs as root and cron is active...
EUVD-2015-3221
Malware in sbrugna...
CVE-2015-3140
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...
CVE-2015-3140
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...
CVE-2015-3140
CVE-2015-3140 affects Synametrics products: SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567, vulnerable to cross-site request forgery (CSRF). Root cause: CSRF in multiple web app components allowing attacker to trigger actions in an authenticated use...
PT-2019-7177
Name of the Vulnerable Software and Affected Versions Synametrics Technologies SynaMan versions prior to 3.5 Build 1451 Synametrics Technologies Syncrify versions prior to 3.7 Build 856 Synametrics Technologies SynTail versions prior to 1.5 Build 567 Description The issue concerns multiple...
CVE-2015-3140: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...
Syncrify Server Multiple Vulnerabilities
Syncrify Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:syncrify:server";...
Syncrify Server Remote Version Detection
Detects the installed version of Syncrify Server. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...
Syncrify Server <= 3.6 Build 833 - CSRF / XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: email protected Vendor Homepage: http://www.synametrics.com Software Link:...
Syncrify Server 3.6 Build 833 CSRF / Cross Site Scripting
Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/SyncrifyDownload.htm Version: 3.6...
Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities
Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/SyncrifyDownload.htm Version: 3.6...
Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities
Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link:...
Syncrify Detection
The remote host is running Syncrify, a web-based incremental backup application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49658; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Syncrify Detection"; scriptsummaryenglish:"Looks for evidenc...
Syncrify < 2.1 Build 420 Multiple Security Bypass Vulnerabilities
According to its version, the remote installation of Syncrify is affected by multiple security bypass vulnerabilities : - The application fails to restrict access to the password management page and allows users to change the administrator's password by directly accessing that page. - It is...
Syncrify Multiple Remote Security Bypass Vulnerabilities
Syncrify is prone to multiple remote security-bypass vulnerabilities. Exploiting these issues may allow a remote attacker to bypass certain security restrictions and perform unauthorized actions. Syncrify 2.1 Build 415 and prior are affected. OpenVAS Vulnerability Test $Id: gbsyncrify43333.nasl...