CVE-2020-6994

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The...

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Identifying and Mitigating the CVE-2020–0796 flaw in the fly C...

CVE-2020-1881

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of...

CVE-2020-9330

Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices e.g., by using default credentials can change the LDAP connection IP...

PT-2020-19952 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.9 through 12.7.2 Description: The issue is related to insecure permissions. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

PT-2019-6139 · Tvt · Tvt Nvms-1000

Name of the Vulnerable Software and Affected Versions: TVT NVMS-1000 affected versions not specified Description: The issue is related to directory traversal in TVT NVMS-1000 devices, allowing unauthorized access to restricted information. This is due to incorrect limitation of the path name to a...

PT-2019-4661 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.2 Description: The issue is related to the io uring feature in the Linux kernel, which can lead to requests being executed with UID 0 and full capabilities, even when initiated by an unprivileged user. This...

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition...

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition...

CVE-2019-11601

A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location...

PT-2019-9521 · Prospecta · Prospecta Master Data Online

Name of the Vulnerable Software and Affected Versions: Prospecta Master Data Online MDO version 2.0 Description: The issue is related to Stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2019-12089 · Siemens · Simatic Hmi Panels +13

Name of the Vulnerable Software and Affected Versions: SIMATIC CP 1626 All versions SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions V20.8 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8 SIMATIC HMI Panel incl. SIPLUS...

PT-2019-2723 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Service AppXSVC affected versions not specified Description: The issue is related to the improper handling of hard links by the Windows AppX Deployment Service AppXSVC, which can lead to an elevation of privilege. This...

Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection

Exploit Title: Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Date: 05/01/2019 Exploit Author: Jacob Baines Tested on: Crestron AM-100 1.6.0.2 CVE : CVE-2019-3929 PoC Video: https://www.youtube.com/watch?v=q-PIjnPcu2k Advisory:...

Multiple Command Injection Vulnerabilities in Grandstream Products

Multiple Vulnerabilities in Grandstream devices. - The affected devices are: GAC2500, GVC3202, GXP2200, GXV3275, GXV3240, GXV3611IRHD, GXV3611IRHD, GXV3611IRHD, UCM6204, GXV3370, & WP820. - A remote command execution vulnerability exists in the 'priority' and 'logserver' parameters. An...

Multiple Command Injection Vulnerabilities in Grandstream Products

Multiple Vulnerabilities in Grandstream devices. - The affected devices are: GAC2500, GVC3202, GXP2200, GXV3275, GXV3240, GXV3611IRHD, GXV3611IRHD, GXV3611IRHD, UCM6204, GXV3370, WP820, GWN7000, & GWN7610. - A remote command execution vulnerability exists in the 'priority' and 'logserver'...

CVE-2019-1613

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

PT-2018-1746 · D Link · Dwr-116 +7

Name of the Vulnerable Software and Affected Versions: D-Link DWR-116 versions 1.06 and earlier D-Link DIR-140L versions 1.02 and earlier D-Link DIR-640L versions 1.02 and earlier D-Link DWR-512 versions 2.02 and earlier D-Link DWR-712 versions 2.02 and earlier D-Link DWR-912 versions 2.02 and...