PT-2019-6222 · Kaseya · Kaseya Vsa

Name of the Vulnerable Software and Affected Versions: Kaseya VSA versions through 2017 Description: The issue allows unauthenticated remote commands, providing full direct access to the Kaseya VSA database. Attackers have exploited this in the wild to download and execute ransomware payloads on...

CVE-2017-12410

It is possible to exploit a Time of Check & Time of Use TOCTOU vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of...

Kaseya Virtual System Administrator (VSA) Local Privilege Escalation

Hey, The Local Privilege Escalation vulnerability was found in the Kaseya Virtual System Administrator VSA 1 agent "AgentMon.exe". The agent is a Windows service that periodically executes various programs with aNT AUTHORITY\SYSTEMa privileges. In the Kaseya's default configuration, Windows users...

CVE-2016-8529

CVE-2016-8529 describes a Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier. The issue is resolved in LeftHand OS v12.6 or any subsequent version. Affected products include StoreVirtual 400...

VulnCheck KEV: CVE-2018-20753

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices...

vsa-ac.com.ar XSS vulnerability

Open Bug Bounty ID: OBB-549279 Description| Value ---|--- Affected Website:| vsa-ac.com.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Kaseya VSA 9.2 Authentication Bypass Vulnerability

Exploit for asp platform in category web applications ------------------------------------------------------------------------ Authentication bypass in Kaseya VSA ------------------------------------------------------------------------ Kin Hung Cheng, Robert Hartshorn, May 2017...

Kaseya VSA R9.2 Arbitrary File Read Vulnerability

A security vulnerability was found in Kaseya VSA file download file functionality. Using this vulnerability an authenticated user in a Kaseya VSA environment is able to download arbitrary files from the server including source code of Kaseya, the database backups, configuration files, and even...

Kaseya VSA 9.2 Shell Upload Vulnerability

Exploit for asp platform in category web applications ------------------------------------------------------------------------ Code execution in Kaseya VSA ------------------------------------------------------------------------ Kin Hung Cheng, Robert Hartshorn, May 2017...

Kaseya VSA 9.2 Authentication Bypass

------------------------------------------------------------------------ Authentication bypass in Kaseya VSA ------------------------------------------------------------------------ Kin Hung Cheng, Robert Hartshorn, May 2017 ------------------------------------------------------------------------...

Kaseya VSA 9.2 Shell Upload

------------------------------------------------------------------------ Code execution in Kaseya VSA ------------------------------------------------------------------------ Kin Hung Cheng, Robert Hartshorn, May 2017 ------------------------------------------------------------------------ Abstra...

Kaseya VSA R9.2 Arbitrary File Read

------------------------------------------------------------------------ Arbitrary file read in Kaseya VSA ------------------------------------------------------------------------ Kin Hung Cheng, Robert Hartshorn, May 2017 ------------------------------------------------------------------------...

Kaseya VSA Information Disclosure Vulnerability - Active Check

Kaseya VSA is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Kaseya VSA Detection (HTTP)

HTTP based detection of Kaseya VSA. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.106738";...

Kaseya VSA 6.5.0.0 XSS / Brute Force

https://www.osisecurity.com.au/kaseya-parameter-reflected-xss-enumeration-and-bruteforce-weakness.html Date: 04-Apr-2017 Software: Kaseya Affected version: Kaseya VSA v6.5.0.0. Vulnerability details: 1. The "forgot password" function at https://target/access/logon.asp reveals whether a username i...

Kaseya VSA 9.02.00.04 Information Disclosure

https://www.osisecurity.com.au/kaseya-information-disclosure-vulnerability.html Date: 04-Apr-2017 Product: Kaseya VSA Versions affected: 9.02.00.04 Vulnerability: Installations of Kaseya contain the following installation page: https://target/install/kaseya.html When the product is installed, it...

Kaseya Virtual System Administrator (VSA) - 'uploader.aspx' Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Kaseya VSA uploader.aspx Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability foun...

Kaseya VSA uploader.aspx Arbitrary File Upload Exploit

This Metasploit module exploits an arbitrary file upload vulnerability found in Kaseya VSA versions between 7 and 9.1. A malicious unauthenticated user can upload an ASP file to an arbitrary directory leading to arbitrary code execution with IUSR privileges. This Metasploit module has been tested...

Kaseya VSA uploader.aspx Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Kaseya VSA uploader.aspx Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability foun...

Kaseya Virtual System Administrator Code Execution / Privilege Escalation

Hi, I have found 3 vulnerabilities in Kaseya's flagship product: - unauthenticated remote code execution CVE-2015-6922 / ZDI-15-449 - unauthenticated remote privilege escalation CVE-2015-6922 / ZDI-15-448 - authenticated remote code execution CVE-2015-6589 / ZDI-15-450 Kaseya VSA is an IT...