Siemens SIMATIC S7-300 CPU Improper Input Validation (CVE-2018-16561)

A vulnerability has been identified in SIMATIC S7-300 CPUs All versions V3.X.16. The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an...

kinobank.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145865 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting kinobank.org website and its users. Following...

CVE-2019-16561

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM...

CVE-2019-16561

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier: users with Overall/Read access can disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM. Root cause is lack of effective trust management; impact is bypass of certificate checks for all communications. Mitigatio...

CVE-2019-16561

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM...

CVE-2018-16561

creationtimestamp| type| source ---|---|--- 2019-04-17 18:33:18+00:00| seen| https://t.me/cibsecurity/3770...

CVE-2018-16561

CVE-2018-16561 affects SIMATIC S7-300 CPUs (all versions before V3.X.16). The flaw is improper validation of S7 communication packets, enabling a Denial-of-Service that leaves the CPU in DEFECT mode until manual restart. Exploitation requires sending a crafted S7 packet via an interface (Ethernet...

Siemens SIMATIC S7-300 CPU

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Siemens Equipment : SIMATIC S7-300 CPU Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could crash the device being accessed, resulting...

CVE-2017-16561

/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...

CVE-2017-16561

/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...

CVE-2017-16561

CVE-2017-16561 affects Ingenious School Management System 2.3.0. Affected component: /view/friend_profile.php; vulnerability: Boolean-based and Time-based SQL injection in the GET parameter friend_index. Root cause: improper handling/concatenation of user input into SQL, enabling attacker to infl...

gu.se Open Redirect vulnerability

Vulnerable URL: http://www.gu.se/jsp/retrieveAdjust.jsp?returnAddress=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 16561 VIP website...

Fedora Update for firebird FEDORA-2014-16561

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...