Advantech iView SQL Injection Vulnerability (CNVD-2023-16472)

Advantech iView is a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China. iView is vulnerable to a SQL injection vulnerability, which is caused by a special element used in SQL commands that is not neutralized and can be exploited to obtain...

The vulnerabilities of distributed control systems such as CENTUM CS 3000, CENTUM VP, B/M9000 VP, B/M9000CS, and the OPC-server Exaopc are related to violations of secure design principles. These vulnerabilities allow attackers to access protected information or cause service failures.

The vulnerabilities of distributed control systems such as CENTUM CS 3000, CENTUM VP, B/M9000 VP, B/M9000CS, and OPC-servers from Exaopc are related to violations of secure design principles. Exploitation of these vulnerabilities can allow attackers to access protected information or cause servic...

CVE-2022-36523

D-Link Go-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php...

D-Link GO-RT-AC750 授权问题漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China's AUO D-Link. A security vulnerability exists in the D-Link GO-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02, which stems from a susceptibility to static default credentials attack from /etc/init0.d/S80telnetd.sh...

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

Input validation

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

CVE-2021-22289 RCE through Project Upload from Target

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

CVE-2021-22289

CVE-2021-22289 affects B&R Automation Studio 4 (version >= 4.0) and targets the project upload mechanism. It stems from improper input validation and could allow an unauthenticated network attacker to execute code remotely. Documents describe potential remote code execution, information disclo...

Malicious Package

Overview simple-project-pkg-b is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

CVE-2021-22289: Improper Input Validation

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

B&R Automation Studio 输入验证错误漏洞

B&R Automation Studio is an integrated software development environment from B&R Automation, an Austrian company. A security vulnerability exists in B&R Automation Studio versions above 4.0, which stems from an input validation vulnerability in the project upload mechanism that could allow an...

Fiberhome AN5506-02-B Cross Site Scripting

Exploit Title: FiberHome - AN5506-02-B - RP2521 - Authenticated Stored XSS Date: 10/08/2022 Exploit Author: Leonardo Goncalves Version: Firmware RP2521 1 Log in the equipment via your web browser 2 Go to Network authsettings 3 In the "sncfgloid" inject the payload "alert" 4 Click Save 5 Exploit!...

PT-2022-4238

Name of the Vulnerable Software and Affected Versions B&R Automation Studio version 4.0 and later Description The issue is related to improper input validation in the project upload mechanism, which may allow an unauthenticated network attacker to execute code. This could potentially lead to remo...

[SECURITY] Fedora 36 Update: golang-etcd-bbolt-1.3.6-5.fc36

Package Bbolt implements a low-level key/value store in pure Go. It supports fully serializable transactions, ACID semantics, and lock-free MVCC with multiple readers and a single writer. Bolt can be used for projects that want a simple data store without the need to add large dependencies such a...

CVE-2022-23001

When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is used. An attacker with user level privileges and no other user's assistance can exploit this vulnerability with only knowledge of the public key and the library. The resulting...

CVE-2022-23001

When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is used. An attacker with user level privileges and no other user's assistance can exploit this vulnerability with only knowledge of the public key and the library. The resulting...

CVE-2022-23001

When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is used. An attacker with user level privileges and no other user's assistance can exploit this vulnerability with only knowledge of the public key and the library. The resulting...

Code injection

When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is used. An attacker with user level privileges and no other user's assistance can exploit this vulnerability with only knowledge of the public key and the library. The resulting...

CVE-2022-23001

The CVE-2022-23001 entry concerns the Western Digital Sweet B library, which implements public-key elliptic-curve cryptography (NIST P-256 and SECG secp256k1). The vulnerability stems from selecting the wrong sign bit during compression or decompression of elliptic-curve points. An attacker with ...

CVE-2022-23001 Sweet-B Library: Point compress/decompress using the wrong bit for sign

When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is used. An attacker with user level privileges and no other user's assistance can exploit this vulnerability with only knowledge of the public key and the library. The resulting...