Cross site request forgery (csrf)

SPBAS Business Automation Software 2012 has CSRF...

CVE-2013-4665

SPBAS Business Automation Software 2012 has CSRF...

CVE-2013-4665

CVE-2013-4665 affects SPBAS (SPBAS Business Automation Software) 2012 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. The connected documents corroborate a CSRF issue but do not provide further technical details such as affected components, exact root cause, exploit scenari...

CVE-2013-4664

SPBAS Business Automation Software 2012 has XSS...

CVE-2013-4664

The connected records (RH:CVE-2013-4664, NVD, PRION, Red Hat, CVELIST, PRION) consistently identify SPBAS Business Automation Software 2012 as vulnerable to XSS (CVE-2013-4664). The initial description states the same. Details beyond that are not provided in these documents (no explicit impact, a...

Computrols CBAS-Web 19.0.0 - (username) Reflected Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link:...

Prima Access Control 2.3.35 - Arbitrary File Upload Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Prima Access Control 2.3.35 - Arbitrary File Upload Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/...

LCDS LAquis SCADA LQS File Parsing

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: LCDS—Leão Consultoria e Desenvolvimento de Sistemas LTDA ME Equipment: LAquis SCADA Vulnerabilities: Out-of-bounds Read, Type Confusion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Remote code execution

A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Management NOM all versions. The vulnerability could be remotely exploited to Remot...

CVE-2019-3493

CVE-2019-3493 affects Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11 and Micro Focus Network Operations Management (NOM) all versions. The described vulnerability could be remotely exploited to achieve Remote Code Execution....

Clinic Pro v4 - 'month' SQL Injection

Title: Clinic Pro - Clinic Management Software Date: 03.04.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://softwebinternational.com Software Link: https://cms.softwebinternational.com Category: Webapps Tested on: WAMPP @Win Software description: It is developed by PHP Codeigniter...

Clinic Pro v4 - month SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Clinic Pro - Clinic Management Software Exploit Author: Abdullah Çelebi Vendor Homepage: https://softwebinternational.com Software Link: https://cms.softwebinternational.com Category: Webapps Tested on: WAMPP @Win Software description: ...

Clinic Pro 4 SQL Injection

Title: Clinic Pro - Clinic Management Software Date: 03.04.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://softwebinternational.com Software Link: https://cms.softwebinternational.com Category: Webapps Tested on: WAMPP @Win Software description: It is developed by PHP Codeigniter...

LCDS LAquis SCADA ELS Files

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: LCDS—Leão Consultoria e Desenvolvimento de Sistemas LTDA ME Equipment: LAquis SCADA Vulnerability: Out-of-Bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote code execution...

WAGO e!COCKPIT Firmware Downgrade Vulnerability

Summary An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version...

The vulnerability of the software used for creating Pro-Face GP-Pro EX automation projects, due to insufficient validation of input data, allows a perpetrator to execute any executable file upon running GP-Pro EX.

The vulnerability of the software used for creating Pro-Face GP-Pro EX automation projects is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute any executable file upon running GP-Pro EX...

LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: LCDS – Leão Consultoria e Desenvolvimento de Sistemas LTDA ME Equipment: LAquis SCADA Vulnerabilities: Untrusted Pointer Dereference, Out-of-Bounds Read, Integer Overflow to Buffer Overflow, Path...

The vulnerability of the PAC Control Basic and PAC Control Professional industrial automation software, caused by buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the PAC Control Basic and PAC Control Professional industrial automation software arises due to a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Siemens SIMATIC STEP 7 and WinCC Denial of Service Vulnerability

Siemens SIMATIC STEP 7 TIA Portal and WinCC TIA Portal are both products of Siemens, Germany.Siemens SIMATIC STEP 7 TIA Portal is a programming software for SIMATIC controllers. The software provides PLC programming, design option packages and advanced drive technology, etc. WinCC TIA Portal is a...

Omron CX-One Code Execution Cave

Omron CX-One is an integrated toolkit from Omron Corporation of Japan Omron, which includes software for networking, PTs, inverters, temperature controllers, and PLC programming, etc. CX-FLnet, etc. are applications that are integrated into it. A security vulnerability exists in several pieces of...