Modbus Slave PLC 7 - .msw Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Modbus Slave PLC 7 - '.msw' Buffer Overflow PoC Author: Kağan Çapar Software Link: https://www.modbustools.com/download/ModbusSlaveSetup32Bit.exe Vendor Homepage : https://www.modbustools.com Tested Version: 7 Tested on OS:...

healthcare-communications.imedpub.com XSS vulnerability

Open Bug Bounty ID: OBB-691134 Description| Value ---|--- Affected Website:| healthcare-communications.imedpub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

FasterXML Jackson-databind Polymorphic Deserialization Multiple Security Vulnerability

Description FasterXML Jackson-databind is prone to multiple security vulnerabilities. Successfully exploiting these issues may allow an attacker to execute arbitrary code, bypass certain security restrictions, perform unauthorized actions or obtain potentially sensitive information. Failed exploi...

CVE-2018-15976

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-15976

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

Privilege escalation

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-15976

Adobe Technical Communications Suite (TCS) versions 1.0.5.1 and earlier are affected by an insecure library loading vulnerability (DLL hijacking) in the installer, which can lead to privilege escalation. The issue is documented as CVE-2018-15976. Based on sources, exploitation could result in hig...

CVE-2018-15976

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

Ruby OpenSSL CVE-2018-16395 Certificate Validation Security Bypass Vulnerability

Description Ruby OpenSSL is prone to a security-bypass vulnerability. An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. Technologies Affected Oracle Communications Interactive Session Recorder 6.0 Oracle...

Security Bulletin: Personal Communications WorkStation file Buffer Overflow Vulnerability (CVE-2012-0201)

Summary A buffer overflow vulnerability in the handling of WorkStation files .ws by IBM Personal Communications could allow a remote attacker to cause a denial of service application crash or potentially execute arbitrary code on vulnerable installations of IBM Personal Communications...

CVE-2018-17915

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the upda...

Naming & Shaming Web Polluters: Xiongmai

What do we do with a company that regularly pumps metric tons of virtual toxic sludge onto the Internet and yet refuses to clean up their act? If ever there were a technology giant that deserved to be named and shamed for polluting the Web, it is Xiongmai -- a Chinese maker of electronic parts th...

HPSBHF03595 rev. 6 - LoJax UEFI Rootkit

Potential Security Impact Elevation of Privilege, Information Disclosure, Loss of Confidentiality, Loss of Integrity. Source: HP, HP Product Security Response Team PSRT Reported by: ESET Research VULNERABILITY SUMMARY HP has identified a potential security vulnerability with a UEFI rootkit LoJax...

Adobe Technical Communications Suite DLL Load Local Elevation of Privilege Vulnerability

Adobe Technical Communications Suite is a set of information management suite from the American company Audobee Adobe. The product supports users to create, manage and publish technical documents, books and other content. A DLL load local elevation of privilege vulnerability exists in Adobe...

Adobe Releases Security Patch Updates for 11 Vulnerabilities

Adobe has released its monthly security updates to address a total of 11 vulnerabilities in Adobe Digital Editions, Framemaker, and Technical Communications Suite, of which four are rated critical and rest 7 are important in severity. Adobe has also released updated versions for Flash Player , bu...

Adobe Releases Security Patch Updates for 11 Vulnerabilities

Adobe has released its monthly security updates to address a total of 11 vulnerabilities in Adobe Digital Editions, Framemaker, and Technical Communications Suite, of which four are rated critical and rest 7 are important in severity. Adobe has also released updated versions for Flash Player, but...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Digital Editions, Framemaker, and Technical Communications Suite. An attacker could exploit these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review Adobe Security...

APSB18-38 Security Updates Available for Adobe Technical Communications Suite

Adobe has released a security update for the Adobe Technical Communications Suite. This update resolves an insecure library loading vulnerability in the installer that could lead to privilege escalation...

CVE-2018-5401

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The devices transmit process control information via unencrypted Modbus communications. Impact: A...

Buffer overflow

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The devices transmit process control information via unencrypted Modbus communications. Impact: A...