DATAC RealWin SCADA Server On_FC_CONNECT_FCS_a_FILE Buffer Overflow Vulnerability

DATAC RealWin SCADA Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DATAC RealWin SCADA Server On_FC_CONNECT_FCS_a_FILE Buffer Overflow Vulnerability

This host is running DATAC RealWin SCADA Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrealwinscadaonfcbinfilebofvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ DATAC RealWin SCADA Server OnFCCONNECTFCSaFILE Buffer Overflow Vulnerability Authors: Sooraj ...

The Pacer Edition CMS 2.1 - email Cross-Site Scripting

The Pacer Edition CMS 2.1 - email Cross-Site Scripting source: https://www.securityfocus.com/bid/48215/info The Pacer Edition CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

Cross site scripting

Cross-site scripting XSS vulnerability in the safehtml filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422...

CVE-2011-1949

CVE-2011-1949 is a Plone XSS issue in the PortalTransforms safe_html filter (Plone 2.1–4.1). The vulnerability allows remote authenticated users to inject arbitrary script or HTML via unspecified vectors, caused by the safe_html transform path. This is described as a different vulnerability from ...

Fedora Update for geeqie FEDORA-2011-5200

Check for the Version of geeqie OpenVAS Vulnerability Test Fedora Update for geeqie FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

WampServer 2.1 Remote File Download Exploit

Exploit for php platform in category web applications !/usr/bin/perl In The name of Allah Title : WampServer 2.1 Remote File Download Exploit Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact :...

Wamp Webserver 2.1 File Download

!/usr/bin/perl In The name of Allah Title : WampServer 2.1 Remote File Download Exploit Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Content/Download File Tested on : Windows XP S...

Integer overflow

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via crafted 1 OnFCMISCFCSMSGBROADCAST and 2 OnFCMISCFCSMSGSEND packets, which trigger a heap-based buffer overflow...

CVE-2011-1563

CVE-2011-1563 affects DATAC Control International RealWin SCADA Server (RealFlex RealWin) 2.1 and earlier. The vulnerability is a stack-based buffer overflow in the HMI RealWin server when processing multiple packet types (e.g., On_FC_CONNECT_FCS_LOGIN, FC_CTAGLIST_FCS_*TAG, and others) sent to p...

ABBS Electronic Flash Cards 2.1 - .fcd Local Buffer Overflow

ABBS Electronic Flash Cards 2.1 - .fcd Local Buffer Overflow Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose...

Design/Logic Flaw

Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets CSS 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

UBUNTU-CVE-2011-0132

Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets CSS 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

CVE-2011-0132

Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets CSS 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-098 March 2, 2011 -- CVE ID: CVE-2011-0132 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple WebKit -- Vulnerabili...

Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way th...

Course Registration Management System 2.1 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Course MS 2.1 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/coursems Release...

Course MS Cross Site Scripting, SQL Injection and Local File Include Vulnerabilities

Course Registration Management System is prone to multiple input- validation vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities 2. An SQL-injection vulnerability 3. A local file-include vulnerability Exploiting these issues could allow an attacker to execute arbitrary...

Solar FTP 2.1 Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Titulo: Exploit Denial of Service Solar FTP 2.1 +Data: 21/10/2011 +Autor: x000 +Versão: 2.1 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A xxx xxx xxxxxxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxx xxx xxxxxxxxxxxxx...

course registration management system 2.1 - Multiple Vulnerabilities

course registration management system 2.1 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98650/CourseMS2.1-LFI.txt ------------------------------------------------------------------------ Software................Course MS 2.1 Vulnerability...........Local File...