95 matches found
KingSCADA/KingGraphic远程代码执行漏洞
CVECAN ID: CVE-2013-2827 KingSCADA系列产品是基于Windows的控制、监督和数据收集应用程序。 KingSCADA、KingGraphic 3.1及之前版本处理 "ProjectURL" 属性时，ActiveX组件内出现错误，成功利用后可导致下载并执行任意代码。 0 kingview KingSCADA = 3.1 kingview KingGraphic = 3.1 厂商补丁： kingview -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kingview.com...
CVE-2013-2827
creationtimestamp| type| source ---|---|--- 2014-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31575 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/wellintechkingscadakxclientdownload.rb 2025-02-0...
KingScada - kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'KingScada kxClientDownload.ocx ActiveX Remote Code Execution', 'Description' = %q This module abuses the kxClientDownload.ocx ActiveX...
CVE-2013-2827
CVE-2013-2827 concerns an unresolved ActiveX control in WellinTech KingSCADA (before 3.1.2), KingAlarm&Event (before 3.1), and KingGraphic (before 3.1.2) that allows remote code execution by abusing the ProjectURL property to download and execute a DLL on a client. Root cause: insufficient saniti...
KingScada kxClientDownload.ocx ActiveX Remote Code Execution
This module abuses the kxClientDownload.ocx ActiveX control distributed with WellingTech KingScada. The ProjectURL property can be abused to download and load arbitrary DLLs from arbitrary locations, leading to arbitrary code execution, because of a dangerous usage of LoadLibrary. Due to the natu...
Debian Security Advisory DSA 2827-1 (libcommons-fileupload-java - arbitrary file upload via deserialization)
It was discovered that Apache Commons FileUpload, a package to make it easy to add robust, high-performance, file upload capability to servlets and web applications, incorrectly handled file names with NULL bytes in serialized instances. A remote attacker able to supply a serialized instance of t...
Debian: Security Advisory (DSA-2827-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : chromium -- multiple vulnerabilities (ff922811-c096-11e1-b0f4-00262d5ed8ee)
Google Chrome Releases reports : 118633 Low CVE-2012-2815: Leak of iframe fragment id. Credit to Elie Bursztein of Google. 120222 High CVE-2012-2817: Use-after-free in table section handling. Credit to miaubiz. 120944 High CVE-2012-2818: Use-after-free in counter layout. Credit to miaubiz. 120977...
CVE-2012-2827
Use-after-free vulnerability in the UI in Google Chrome before 20.0.1132.43 on Mac OS X allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2012-2827
Use-after-free vulnerability in the UI in Google Chrome before 20.0.1132.43 on Mac OS X allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2012-2827
CVE-2012-2827 describes a use-after-free in the Mac OS X UI of Google Chrome prior to 20.0.1132.43. The vulnerability can allow a denial of service and possibly other unspecified impacts via unknown vectors. The NVD assessment lists a high base score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). Public re...
CVE-2012-2827
Removed by vendor...
Stable Channel Update
The Google Chrome team is happy to announce the arrival of Chrome 20 20.0.1132.43 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority ...
APPLE-SA-2011-10-12-4 Safari 5.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...
Google Chrome < 13.0.782.215 Multiple Vulnerabilities (Sep 2011) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2827
CVE-2011-2827 affects Google Chrome via a use-after-free in the text-search workflow. Affected component: Chrome’s text-search handling (likely in the browser engine). Vulnerable condition: Chrome versions prior to 13.0.782.215. Impact: remote attackers could trigger a denial of service or potent...
CVE-2011-2827
Removed by vendor...
CVE-2009-2827
Heap-based buffer overflow in Disk Images in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FAT filesystem on a disk image...
CVE-2009-2827
CVE-2009-2827 affects Apple Mac OS X 10.5.8 Disk Images. The vulnerability is a heap-based buffer overflow in the Disk Images component when handling FAT filesystems on a disk image. The description states it can be triggered by user-assisted remote attackers to execute arbitrary code or cause a ...