1312 matches found
CVE-2017-12736
CVE-2017-12736 affects Siemens Ruggedcom ROS and SCALANCE devices. After initial configuration, the Ruggedcom Discovery Protocol (RCDP) can still write to the device under certain conditions, potentially allowing an attacker in the adjacent network to perform unauthorized administrative actions. ...
WAGO PFC 200 Series Authentication Bypass
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Critical CODESYS vulnerabilities product: WAGO PFC 200 Series, see "Vulnerable / tested versions" vulnerable version: plclinuxrt 2.4.7.0, see "Vulnerable / tested version...
The vulnerability of the TCP/IP software for the JanTek JTC-200 converter, related to deficiencies in authentication procedures, allows a hacker to gain access to the BusyBox Linux shell.
The vulnerability of the TCP/IP microprogramming software of the JanTek JTC-200 converter is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to the BusyBox Linux shell using the Teln...
WAGO PFC 200 SERIES Multiple Vulnerabilities
Exploit for hardware platform in category local exploits VENDOR DESCRIPTION “The WAGO-I/O-SYSTEM is a flexible fieldbus-independent solution for decentralized automation tasks. With the relay, function and interface modules, as well as overvoltage protection, WAGO provides a suitable interface fo...
CRITICAL CODESYS VULNERABILITIES IN WAGO PFC 200 SERIES
VENDOR DESCRIPTION “The WAGO-I/O-SYSTEM is a flexible fieldbus-independent solution for decentralized automation tasks. With the relay, function and interface modules, as well as overvoltage protection, WAGO provides a suitable interface for any application.” Source:...
[SECURITY] Fedora 26 Update: kernel-4.13.10-200.fc26
The kernel meta package...
JanTek JTC-200 RS232-NET Connector CSRF / Missing Authentication Vulnerability
JanTek JTC-200 RS232-NET Connector suffers from cross site request forgery and missing authentication vulnerabilities...
JanTek JTC-200 RS232-NET Connector CSRF / Missing Authentication
Vendor: JanTek Equipment: JTC-200 Vulnerabilities: Cross-site Request Forgery, Improper Authentication Advisory URL: https://ipositivesecurity.com/2017/10/28/ics-jantek-jtc-200-rs232-net-converter-advisory-published/ ICS-CERT Advisory https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02 CVE-ID...
Fastest and Most Advanced Password Recovery Utility: Hashcat
hashcat is the world’s fastest and most advanced password recovery utility, supporting five unique modes of attack for over 200 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to help enab...
JanTek JTC-200 Unauthorized Access Vulnerability
JanTek JTC-200 is a TCP/IP converter serial server from Taito JanTek Technology. An unauthorized access vulnerability exists in the JanTek JTC-200. An attacker can access the Busybox Linux shell via Telnet service without any authentication...
JanTek JTC-200 Cross-Site Request Forgery Vulnerability
JanTek JTC-200 is a TCP/IP converter serial server from Taito JanTek Technology. A cross-site request forgery vulnerability exists in the JanTek JTC-200. A remote attacker can exploit this vulnerability to perform unauthorized actions as a user...
CVE-2016-5789
A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...
Cross site request forgery (csrf)
A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...
Authentication flaw
An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication...
CVE-2016-5791
The CVE-2016-5791 entry concerns JanTek JTC-200 (TCP/IP converter). The connected advisory confirms two vulnerabilities: (1) Cross-Site Request Forgery (CSRF) and (2) Improper Authentication that lets an unauthenticated user access an undocumented BusyBox shell over Telnet. All JTC-200 versions a...
CVE-2016-5789
The CVE-2016-5789 entry affects the JanTek JTC-200 all-versions TCP/IP converter. Connected sources confirm two adjacent issues: Cross-Site Request Forgery (CSRF) and Improper Authentication. CSRF enables an attacker to perform actions with the victim’s active session; Improper Authentication cou...
CVE-2016-5791
An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication...
Dreambox Plugin BouquetEditor - Cross-Site Scripting
Exploit Title: Vulnerability XSS - Dreambox Shodan Dork: Dreambox 200 Date: 12/10/2017 Exploit Author: Thiago "THX" Sena Vendor Homepage: https://www.dreamboxupdate.com Version: 2.0.0 Tested on: kali linux, windows 7, 8.1, 10 CVE : CVE-2017-15287 Vulnerabilty: Cross-site scripting XSS in plugin...
JanTek JTC-200
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: JanTek Equipment: JTC-200 Vulnerabilities: Cross-site Request Forgery, Improper Authentication AFFECTED PRODUCTS The following versions of JTC-200, a TCP/IP converter, are affected:...