CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, r...

CS-Cart Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16134/info CS-Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...

CVE-2014-3264: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 9.1.5 and earlier allows remote authenticated users to cause a denial of service device reload via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561...

Stack overflow

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier,...

CVE-2014-0782 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier,...

PT-2014-2035

Name of the Vulnerable Software and Affected Versions Yokogawa CENTUM CS 1000 versions prior to R3.09.50 Yokogawa CENTUM CS 3000 Entry Class versions prior to R3.09.50 Yokogawa CENTUM VP versions prior to R5.03.00 Yokogawa CENTUM VP Entry Class versions prior to R5.03.00 Yokogawa Exaopc versions...

CVE-2014-0782: Stack-based Buffer Overflow

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier,...

Yokogawa CENTUM CS 3000 SCADA Remote Code Execution (CVE-2014-0782)

A remote code execution vulnerability has been reported in Yokogawa CENTUM CS 3000. The vulnerability is due to insecure usage of memory creation...

Yokogawa CENTUM CS 3000 SCADA Buffer Overflow (CVE-2014-0784)

A remote code execution vulnerability has been reported in Yokogawa CENTUM CS 3000. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...

CVE-2014-2429

Unspecified vulnerability in the PeopleSoft Enterprise CS Campus Self Service component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Campus Mobile...

CVE-2014-2429

Technical details for CVE-2014-2429 are not publicly available in the provided documents. Monitor for updates from official advisories; current sources summarize the vulnerability only at a high level without specifics.

PT-2014-4691

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.0 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Campus Mobile in the PeopleSoft Enterprise CS Campus Self Service component...

CVE-2014-0783

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet...

CVE-2014-0784

Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet...

CVE-2014-0781

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets...

Heap overflow

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets...

CVE-2014-0784

CVE-2014-0784 is a stack-based buffer overflow in BKBCopyD.exe of Yokogawa CENTUM CS 3000 (R3.09.50 and earlier). A crafted TCP packet can trigger the overflow, allowing remote attackers to execute arbitrary code with the CENTUM user’s privileges. Public exploitation is noted (Metasploit-related ...

CVE-2014-0783

CVE-2014-0783 affects Yokogawa CENTUM CS 3000, specifically the BKHOdeq.exe service. A stack-based buffer overflow can be triggered by a crafted TCP packet sent to port 20171/TCP, allowing remote code execution with CENTUM user privileges on affected versions (R3.09.50 and earlier). Yokogawa has ...

CVE-2014-0783 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet...

CVE-2014-0781 Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets...