5437 matches found
Google Chrome OS CVE-2019-16508 Integer Overflow Vulnerability
Description Google Chrome OS is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed. Google Chrome OS versions prior to...
plan-b-software.eu Improper Access Control vulnerability
Open Bug Bounty ID: OBB-976258 Security Researcher ANS Helped patch 452 vulnerabilities Received 8 Coordinated Disclosure badges Received 31 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting plan-b-software.eu website and i...
Rockwell Automation/Allen-Bradley PanelView 5510 2715P-T10CD-B 10.4-in. Touch HMI Terminal
Binary data 765031.prm...
Rockwell Automation/Allen-Bradley PanelView 5510 2715P-T19CD-B 19-in. Touch with Keypad HMI Terminal
Binary data 765041.prm...
Rockwell Automation/Allen-Bradley PanelView 5510 2715P-T7WD-B 7-in. Touch HMI Terminal
Binary data 765027.prm...
Yokogawa Vnet/IP Open Communication Driver Denial-of-Service (ICSA-19-003-02)
Binary data 720286.prm...
Webmin 1.920 - Remote Code Execution
Webmin 1.920 - Remote Code Execution !/bin/sh CVE-2019-15107 Webmin Unauhenticated Remote Command Execution based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...
Webmin 1.920 - Remote Code Execution
!/bin/sh CVE-2019-15107 Webmin Unauhenticated Remote Command Execution based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html Alternative advisory spanish:...
ZZCMS website building system investment module b_zs parameter SQL injection vulnerability
ZZCMS with product investment type template, you can quickly build product investment website. ZZCMS website building system investment module bzs parameter SQL injection vulnerability, attackers can use the vulnerability to obtain database information...
Rockwell Automation Arena Simulation Software (Update B)
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Low skill level to exploit Vendor: Rockwell Automation Equipment: Arena Simulation Software --------- Begin Update B Part 1 of 2 --------- Vulnerabilities: Use After Free, Information Exposure, Type Confusion, Insufficient UI Warning of Dangerous...
b-locked.be Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-882928 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting b-locked.be website and its...
The vulnerability of the command-line interface of Cisco UCS Blade Series B software allows a hacker to write arbitrary files.
The vulnerability of the command-line interface of Cisco UCS Blade series B micro-programming system software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to write arbitrary files by modifying the command-line interface parameters...
Trint Ltd: IDOR to update folder name of other user
Summary There is an IDOR to update folder name of other user Steps To Reproduce: - user A login to the application and see the folder name F494331 - user B login to the application and call the API with the projectId of user A POST / HTTP/1.1 Host: graphql2.trint.com User-Agent: Mozilla/5.0 Windo...
Rockwell Automation/Allen-Bradley PanelView 5500 15 Touch Version B HMI Terminal
Binary data 751090.prm...
Rockwell Automation/Allen-Bradley PanelView 5500 19 Touch Version B HMI Terminal
Binary data 751092.prm...
Rockwell Automation/Allen-Bradley PanelView 5500 9 Touch Version B HMI Terminal
Binary data 751086.prm...
Rockwell Automation/Allen-Bradley PanelView 5500 10 Keypad Version B HMI Terminal
Binary data 751088.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1400 1766-L32xxx Series A < 7.000 / Series B <= 11.000 HTTP Remote DoS
Binary data 77.prm...