Lucene search
+L

2490 matches found

CNNVD
CNNVD
added 2024/10/03 12:0 a.m.10 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. An SQL injection vulnerability exists in Delta Electronics DIAEnergie HandlerCFG.ashx, which can be exploited by an attacker to view, add, modify, or delete information in the back-end...

8.8CVSS7.7AI score0.06772EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.15 views

PT-2024-29934 · Delta Electronics · Diaenergie

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAEnergie affected versions not specified Description: The issue is related to an SQL injection vulnerability in the script Handler CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the...

8.8CVSS7.6AI score0.06772EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/10/03 12:0 a.m.8 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. An SQL injection vulnerability exists in Delta Electronics DIAEnergie AMRegReport.aspx, which can be exploited by an attacker to view, add, modify, or delete information in the back-end...

9.8CVSS7.7AI score0.00535EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2024/09/05 12:0 a.m.7 views

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00424EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/29 4:15 p.m.6 views

CVE-2024-8255

Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vulnerability...

9.8CVSS6.4AI score0.00828EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/29 4:15 p.m.29 views

CVE-2024-8255

Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vulnerability...

9.8CVSS0.00828EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/29 3:18 p.m.16 views

CVE-2024-8255 Path Traversal in Ocean Data Systems Dream Report

Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vulnerability...

8.4CVSS7.9AI score0.00828EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/29 3:18 p.m.41 views

CVE-2024-8255 Path Traversal in Ocean Data Systems Dream Report

Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vulnerability...

8.4CVSS0.00828EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/29 3:18 p.m.51 views

CVE-2024-8255

Delta Electronics DTN Soft (DTN Soft) versions 2.0.1 and earlier are affected by a deserialization of untrusted data vulnerability that can lead to remote code execution. The issue is documented in multiple sources: ZDI describes BIN file parsing deserialization exploitable with user interaction,...

9.8CVSS9.9AI score0.00828EPSS
SaveExploits0References1Affected Software1
CISA
CISA
added 2024/08/29 12:0 p.m.9 views

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on August 29, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-242-01 Rockwell Automation ThinManager ThinServer ICSA-24-242-02 Delta Electronics DT...

7AI score
SaveExploits0References3
ICS
ICS
added 2024/08/29 6:0 a.m.38 views

Delta Electronics DTN Soft

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : DTN Soft Vulnerability : Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution...

9.8CVSS9.8AI score0.00828EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.11 views

Delta Electronics DTN Soft 代码问题漏洞

Delta Electronics DTN Soft is a temperature controller software from Delta Electronics China. A code issue vulnerability previously existed in Delta Electronics DTN Soft version 2.0.1, which stems from the fact that the product deserializes untrusted data, potentially leading to remote code...

9.8CVSS7.7AI score0.00828EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/08/29 12:0 a.m.12 views

Delta Electronics DTN Soft BIN File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DTN Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7AI score0.00828EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.6 views

PT-2024-38893 · Delta Electronics · Dtn Soft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DTN Soft versions 2.0.1 and prior Description: The issue allows an attacker to achieve remote code execution through a deserialization of untrusted data vulnerability. This can be exploited by an attacker to execute arbitrar...

9.8CVSS8.6AI score0.00828EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2024/08/22 12:0 a.m.9 views

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00424EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/22 12:0 a.m.7 views

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00424EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/22 12:0 a.m.8 views

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00424EPSS
SaveExploits0References1
zdt
zdt
added 2024/08/22 12:0 a.m.258 views

DIAEnergie 1.10 SQL Injection Exploit

This Metasploit module exploit a remote SQL injection vulnerability in the CBEC service of DIAEnergie versions 1.10 and below from Delta Electronics. The commands will get executed in the context of NT AUTHORITY\SYSTEM. class MetasploitModule 'DIAEnergie SQL Injection CVE-2024-4548', 'Description...

9.8CVSS8.2AI score0.29425EPSS
SaveExploits5
Zero Day Initiative
Zero Day Initiative
added 2024/08/22 12:0 a.m.10 views

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00424EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/22 12:0 a.m.10 views

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00424EPSS
SaveExploits0References1
Rows per page
Query Builder