47 matches found
SolarView Compact 6.00 - (time_begin) Cross-Site Scripting Vulnerability
Exploit Title: SolarView Compact 6.00 - 'timebegin' Cross-Site Scripting XSS Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29299 Tested on: Windows Proof Of Concept:...
CVE-2022-29303
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...
Directory traversal
SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...
Command injection
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...
Design/Logic Flaw
SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...
CVE-2022-29303
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...
ICT Protege GX/WX 2.08 Cross Site Scripting
ICT Protege GX/WX 2.08 Authenticated Stored XSS Vulnerability Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App: 02.08.766 Lib: 04.00.169 Int: 02.2.208...
ICT Protege GX/WX 2.08 Authenticated Stored XSS Vulnerability
Summary Protege GX is an enterprise level integrated access control, intrusion detection and building automation solution with a feature set that is easy to operate, simple to integrate and effortless to extend. Protege WX is an all-in-one, web-based, cross-platform system that gives you a fully...
ICT Protege GX/WX 2.08 Client-Side SHA1 Password Hash Disclosure
ICT Protege GX/WX 2.08 Client-Side SHA1 Password Hash Disclosure Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App: 02.08.766 Lib: 04.00.169 Int: 02.2.208...
FinalWire AIDA64 Engineer Buffer Error Vulnerability
Finalwire FinalWire AIDA64 Engineer is a hardware detection engine from the Hungarian company FinalWire Finalwire. The engine has diagnostic features and overclocking support, and supports real-time monitoring of transmitted voltage, temperature, and fan speed readings, among other things. A buff...
Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2019-2677)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
InfoZip UnZip 6.00 / 6.1c22 Buffer Overflow Vulnerability
InfoZip UnZip versions 6.00 and below and 6.1c22 and below suffer from multiple buffer overflow vulnerabilities. ======================================================================= title: Multiple buffer overflow vulnerabilities product: InfoZip UnZip vulnerable version: UnZip = 6.00 / UnZip ...
Aladdin Knowledge System Ltd - PrivAgent.ocx ChooseFilePath BOF
No description provided by source. !--------------------------------------------------------------------------- | Exploit: Aladdin Knowledge System Ltd - PrivAgent.ocx ChooseFilePath BOF | | Author: b33f - http://www.fuzzysecurity.com/ | | OS: Tested on XP PRO SP3 | | Browser: IE 4.01, IE 5.01, I...
Aladdin Knowledge System Ltd - 'PrivAgent.ocx' ChooseFilePath Buffer Overflow
//Messagebox jsle var MessageBox = unescape '%ue9be%uac66%udb2b%ud9c2%u2474%u58f4%uc931%u3fb1%uc083%u3104%u1070%u7003%u0b10'+ '%u7593%u50c0%uf285%u9233%u2907%u2d89%u0459%u5a8a%ua6e8%u2ad8%u4c07%ucea8%u149c'+ '%u655d%ub8dc%u4fd6%uf619%udaf0%u51aa%uf500%u83b2%u7e62%u6020%u0b47%u54fc%u5f0c'+...
Aladdin Knowledge System Ltd - PrivAgent.ocx ChooseFilePath BOF
Exploit for windows platform in category remote exploits //Messagebox jsle var MessageBox = unescape '%ue9be%uac66%udb2b%ud9c2%u2474%u58f4%uc931%u3fb1%uc083%u3104%u1070%u7003%u0b10'+ '%u7593%u50c0%uf285%u9233%u2907%u2d89%u0459%u5a8a%ua6e8%u2ad8%u4c07%ucea8%u149c'+...
Zoom Player 3.3056 - .ZPL Error Message Arbitrary Code Execution
Zoom Player 3.3056 - .ZPL Error Message Arbitrary Code Execution source: https://www.securityfocus.com/bid/27007/info Zoom Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected...
CVE-2003-1417
nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allow local users to gain access to the key by reading the 1 key.pem or 2 key.der files...
vp-asp-new.txt
VP-ASP 6.00-6.08? SQL Injection / Exploit by [email protected] I'm not responsible for any illegal actions taken by people using the information in this document, if you don't agree please stop reading and close this text document asap. this information is for educational purposes only! ...