Override Access Vulnerability in Panavision E-Mobile

Panavision E-Mobile is a mobile office platform. An override access vulnerability exists in Panmicro E-Mobile. An attacker can use the vulnerability to modify the platform authentication code, obtain database information, lock the OA system and other operations...

Automated Logic WebCTRL 6.5 - Local Privilege Escalation

Automated Logic WebCTRL 6.5 Insecure File Permissions Privilege Escalation Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior ALC WebCTRL, SiteScan Web 6.1 and prior ALC WebCTRL, i-Vu 6.0 and prior AL...

ICS, SCADA Security Woes Linger On

A handful of worrisome vulnerabilities in Honeywell building automation system software disclosed last week are case in point of how far the industry continues to lag in securing SCADA and industrial control systems. Honeywell published in September new firmware that patches vulnerabilities...

Emerson DeltaV Privilege Vulnerability

Emerson DeltaV is a digital automation system from Emerson. The system offers I/O on-demand configuration, embedded intelligent control, and alarm panels. An elevation vulnerability exists in Emerson DeltaV. A local attacker could exploit this vulnerability to gain elevated privileges...

SQL injection vulnerability in the info_id parameter of PlacardView.aspx page of OA system of Shanghai Shuang Yang Computer Hi-Tech Development Co.

Shanghai Shuang Yang Computer Hi-Tech Development Company Shuang Yang for short is a high-tech enterprise mainly engaged in application software development and system integration. The product /DSOATY/FromBaoShan/LaborSpecial/PlacardView.aspx?infoid=1 at the existence of SQL injection...

Scan Reveals Hydropower Plants, Other Critical Infrastructure Exposed Online

An Internet scan of the IPv4 address space uncovered more than 100 critical facilities exposed to the public Internet, including hydropower plants in Germany and Italy, and a smart building in Israel hosting luxury apartments. The investigation, conducted by researchers at Internet Wache of Berli...

File Upload Vulnerability in OA System of Wando Network Technology Co.

Wando Network Technology Limited OA system is a set of office software. A file upload vulnerability exists in the Wando Network Technology Ltd OA system, which can be exploited by attackers to gain control of the website...

ILas图书馆自动化集成系统 NTReaderCritic.aspx等2处 时间盲注漏洞

0x01漏洞简介 ILas图书馆自动化集成系统在NTReaderCritic.aspx和NTUniBookRetrInfo.aspx两个页面存在时间延迟注入漏洞。 0x02漏洞详情 NTReaderCritic.aspx sqlmap -u ".../NTReaderCritic.aspx?strRenco=1&strTitle=1" 相关代码如下： protected void PageLoadobject sender, EventArgs e if !base.IsPostBack if base.Request.QueryString"strRenco" != null &&...

Struts2 Remote Command Execution Vulnerability in OA System of Beijing Hurong Times Software Co.

Beijing Hurong Times Software Co., Ltd OA system is a set of daily operation and management application system for organizations. The OA system of Beijing Hurong Times Software Co., Ltd. suffers from a Struts2 remote command execution vulnerability, which can be exploited by an attacker to remote...

Schneider Electric SBO / AS - Multiple Vulnerabilities

Exploit Title: Schneider Electric SBO / AS Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.schneider-electric.com Versions Reported: Automation Server Series AS, AS-P, v1.7 and prior CVE-ID: CVE-2016-2278 About Schneider Electric’s corporate headquarters is located in...

鸿信办公自动化系统/oa/File.aspx和/Page/System/UserDetail.aspx存在遍历漏洞

No description provided by source...

鸿信办公自动化系统中5.0 版本的ewebeditor默认配置可文件上传漏洞

No description provided by source...

Emerson DeltaV™ Digital Automation System 弱口令

参考链接: http://www.chem.mtu.edu/chemeng/current/newcourses/CM4120/2009/Getting%20Started.pdf...

The vulnerability of the enterprise automation system HP Operations Manager i allows a perpetrator to increase their privileges.

The vulnerability of the execve system call implementation in HP Operations Manager is related to errors in the code. Exploiting this vulnerability could allow a malicious individual to increase their privileges locally...

The vulnerability of the Oracle E-Business Suite system’s automation activities allows a perpetrator to gain access to Oracle Payments or execute arbitrary codes.

The vulnerability of the Oracle Payments component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability can allow a malicious actor to gain access to Oracle Payments or execute arbitrary code...

Schneider Electric StruxureWare Building Expert Security Patch

Industrial control manufacturer Schneider Electric has published new firmware for its StruxureWare Building Expert building automation system that patches a remotely exploitable vulnerability. Researcher Artyom Kurbatov discovered that the system transmits user credentials in plaintext between th...

The vulnerability of the Oracle E-Business Suite system for automating business processes allows a perpetrator to compromise data integrity.

The vulnerability of the Oracle Applications Manager sub-component of the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of data...

Panmicro e-office Collaboration Management Platform Privilege Bypass Vulnerability

A login bypass vulnerability exists in the Panmicro e-office Collaboration Management Platform, which allows an attacker to directly log into the OA system with super administrator privileges without login credentials...

Koha Directory Traversal Vulnerability

Koha is the first open source library automation system. Koha suffers from a directory traversal vulnerability that could be exploited by an attacker to read arbitrary files...

MEHR Automation System Arbitrary File Download

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : MEHR Automation System Arbitrary File Download Vulnerabilitypersian portal Author : alieye vendor : http://shakhesrayane.ir/ Contact : [email protected] Risk : High Class: Remote Google Dork: intext:"[email protected]"...