Siemens Simatic S7-1200 CPU START/STOP Module

Exploit for hardware platform in category remote exploits Exploit Title: Siemens Simatic S7 1200 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3...

Siemens S7-1200 Insecure Storage of HTTPS CA Certificate

Overview Siemens has reportedSSA-240718, http://www.siemens.com/corporate-technology/en/research-areas/siemens-cert-security-advisories.htm, Web site last accessed September 19, 2012 an insecure HTTPS certificate storage vulnerability in Siemens’ S7-1200 v2.x. Siemens has provided guidance to...

CVE-2012-1200

CVE-2012-1200 corresponds to Multiple PHP remote file inclusion vulnerabilities in Nova CMS. The affected components allow an attacker to execute arbitrary PHP code via user-supplied input in four vectors: (1) optimizer/index.php through fileType, (2) administrator/modules/moduleslist.php through...

CVE-2012-1200

creationtimestamp| type| source ---|---|--- 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36696 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36699 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36698 2012-02-11...

Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration Without Credentials

By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier, without credentials. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56210; scriptversion"1.5"...

SMB Use Host SID to Enumerate Local Users Without Credentials

Using the host security identifier SID, Nessus was able to enumerate local users on the remote Windows system, without credentials. C Tenable Network Security, Inc. @PREFERENCES@ include'compat.inc'; if description scriptid56211; scriptversion"1.13";...

Ubuntu Update for quassel USN-1200-1

Ubuntu Update for Linux kernel vulnerabilities USN-1200-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12001.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for quassel USN-1200-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

CentOS Update for thunderbird CESA-2010:0545 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for devhelp CESA-2010:0501 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for devhelp CESA-2010:0501 centos5 i386

Check for the Version of devhelp OpenVAS Vulnerability Test CentOS Update for devhelp CESA-2010:0501 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Black Hat: Remote DOS, Backdoor, Easter Egg Among Newly Discovered Siemens Holes

Dillon Beresford used a presentation at the Black Hat Briefings on Wednesday to detail more software vulnerabilities affecting industrial controllers from Siemens, including a serious remotely exploitable denial of service vulnerability, more hard-coded administrative passwords, and even an easte...

Siemens SIMATIC S7-1200 CPU V1/V2 Devices

SUMMARY SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker - to trigger functions by record and playback of legitimate network communication, or - to place the controller in stop/defect state by causing a communications error...

CVE-2011-1200

CVE-2011-1200 affects Google Chrome prior to 10.0.648.127. The issue is described as an improper cast of an unspecified variable during text rendering, allowing remote attackers to cause a denial of service or potentially other impact via a crafted document. Connected sources (NVD, OpenVAS/NESSUS...

CVE-2011-1200

Removed by vendor...

CentOS Update for seamonkey CESA-2010:0499 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0499 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS 4 : firefox (CESA-2010:0500)

An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common...

Ubuntu: Security Advisory (USN-930-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for thunderbird FEDORA-2010-11361

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for sunbird FEDORA-2010-11361

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

seamonkey security update

CentOS Errata and Security Advisory CESA-2010:0499 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...