Siemens SIMATIC WinCC (TIA Portal) Code Upload Vulnerability (SSA-121293)

Binary data scadasiemenstiawinccssa-121293.nbin...

Multiple Siemens Products Code Upload Vulnerability Vulnerability

Siemens SIMATIC PCS 7 and SIMATIC WinCC are both products of Siemens, Germany.SIMATIC PCS 7 is a process control system.SIMATIC WinCC is an automated SCADA system.SIMATIC WinCC is one of the data analysis and display components. SIMATIC WinCC is an automated data acquisition and monitoring SCADA...

PT-2019-3865

Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions V8.0 and earlier SIMATIC PCS 7 version V8.1 through V8.1 with WinCC V7.3 Upd 18 SIMATIC PCS 7 version V8.2 through V8.2 SP1 with WinCC V7.4 SP1 Upd 10 SIMATIC PCS 7 version V9.0 through V9.0 SP2 with WinCC V7.4 SP1 Upd 1...

CVE-2019-11568

An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php file with the application/octet-stream content type...

CVE-2019-8992

The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution for...

CVE-2018-16169

Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors...

Roxy Fileman File Upload Vulnerability

Roxy Fileman is a set of open source file browser for . A security vulnerability exists in the upload.php file in Roxy Fileman version 1.4.5. An attacker can exploit this vulnerability to upload shell code files to the server...

OCS Inventory NG ocsreports Shell Upload

Request 1 This request creates a temporary file containing PHP code in the /usr/share/ocsinventory-reports/ocsreports/a.php.a/ directory. POST /ocsreports/index.php?function=telepackage HTTP/1.1 Host: 192.168.5.135 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:61.0 Gecko/20100101...

CVE-2018-17573

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and...

Design/Logic Flaw

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and...

CVE-2018-17573

The CVE-2018-17573 entry concerns WordPress with the WP-Insert plugin (v2.4.2 and earlier) where an improper exposure/configuration of FCKeditor files (fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and fckeditor/editor/filemanager/co...

PT-2018-14064

Name of the Vulnerable Software and Affected Versions Wp-Insert plugin versions through 2.4.2 Description The issue allows the upload of arbitrary PHP code due to the exposure and configuration of FCKeditor under specific endpoints, including...

CVE-2018-16352

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used...

CVE-2018-16352

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used...

CVE-2018-16352

CVE-2018-16352 affects WeaselCMS 0.3.6. A vulnerability in index.php allows PHP code to be embedded at the end of a .png file when served as image/png, enabling a PHP code upload vulnerability. The CVE is documented across multiple sources (NVD, OSV, CVE lists). The connected documents provide th...

PT-2018-13511

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.6 Description The issue concerns a PHP code upload vulnerability. It can be exploited by embedding code at the end of a .png file when the image/png content type is used, specifically affecting the index.php file...

CVE-2018-16352: Unrestricted Upload of File with Dangerous Type

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used...

Remote Code Upload Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote code upload vulnerability that can be exploited by an attacker to upload arbitrary code via unauthorized construction of specific network packet...

CVE-2018-14399

libs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a .txt?.php.jpg URI in the SRC attribute of an IMG element within infocontent JSON data to the index.php?m=member&c=index&a=register URI...

OpenSID Arbitrary File Upload Vulnerability

OpenSID is a village information management system developed by the SID community. An arbitrary file upload vulnerability exists in OpenSID version 18.06-pasca. An attacker can exploit this vulnerability to upload arbitrary PHP code with the help of an attached document in the article function...