Advantech WebAccess HMI Designer Buffer Overflow Vulnerability (CNVD-2021-60558)

Advantech WebAccess HMI Designer is a human-machine interface integrated development tool from Advantech of Taiwan, China. WebAccess HMI Designer 2.1.9.95 and earlier versions contain a security vulnerability that could be exploited by remote attackers to trigger a heap-based buffer overflow and...

Advantech WebAccess HMI Designer 缓冲区错误漏洞

Advantech WebAccess HMI Designer is a human-machine interface integrated development tool from Advantech of Taiwan, China. WebAccess HMI Designer 2.1.9.95 and earlier versions contain a buffer overflow vulnerability that could be exploited by remote attackers to trigger out-of-bounds writes and...

Advantech WebAccess HMI Designer (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: WebAccess HMI Designer --------- Begin Update A Part 1 of 6 --------- Vulnerabilities: Heap-based Buffer Overflow, Out-of-bounds Write, Improper Restriction of Operation Within the Bounds of a Memory...

Advantech WebAccess HMI Designer 缓冲区错误漏洞

Advantech WebAccess HMI Designer is a human-machine interface integrated development tool from Advantech of Taiwan, China. WebAccess HMI Designer 2.1.9.95 and earlier versions contain a buffer overflow vulnerability that could be exploited by remote attackers to execute arbitrary code on the targ...

CVE-2021-24370

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution...

CVE-2021-24370

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution...

CVE-2021-24370

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution...

CVE-2021-24370 Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution...

CVE-2021-24370

The CVE-2021-24370 issue affects the WordPress plugin Fancy Product Designer prior to version 4.6.9 . It allows unauthenticated arbitrary file upload , which can lead to remote code execution on the server. Multiple connected documents corroborate an arbitrary-file-upload path and RCE vector, wit...

PT-2021-15906 · Unknown · Fancy Product Designer

Name of the Vulnerable Software and Affected Versions: Fancy Product Designer versions prior to 4.6.9 Description: The issue allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution. Recommendations: For versions prior to 4.6.9, update to version 4.6.9 or lat...

The vulnerability of the module for creating and editing user-form templates of the “LOCMAN Designer Form” in the LOCMAN Product Lifecycle Management system lies in its ability to download files of a dangerous type indefinitely, allowing a perpetrator to execute arbitrary code.

The vulnerability of the module responsible for creating and editing user-form templates in the “LOZMAN Designer Form” component of the LOZMAN Product Lifecycle Management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow an attacker to execu...

The vulnerability of the module for creating, editing, and saving diagrams of typical and business processes, determining process properties, creating lists of associated objects “LOCMAN WorkFlow Designer” of the engineering data management system, and the product lifecycle management system LOCMAN:PLM. This vulnerability is related to the unlimited loading of dangerous type files, allowing attackers to execute arbitrary code.

The vulnerability of the module responsible for creating, editing, and saving diagrams of typical and working business processes, as well as defining properties of these processes, and creating lists of associated objects in the “LOZMAN Workflow Designer” system for managing engineering data and...

Hackers‌ ‌Actively‌ ‌Exploiting‌ ‌0-Day‌ ‌in WordPress Plugin Installed on Over ‌17,000‌ ‌Sites

Fancy Product Designer, a WordPress plugin installed on over 17,000 sites, has been discovered to contain a critical file upload vulnerability that's being actively exploited in the wild to upload malware onto sites that have the plugin installed. Wordfence's threat intelligence team, which...

WordPress和Fancy Product Designer 代码问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A code issue exists in the WordPress plugin Fancy Product Designer, which originates from "wp-admin" or...

WordPress Fancy Product Designer premium plugin <= 4.6.8 - Unauthenticated Arbitrary File Upload and Remote Code Execution (RCE) vulnerabilities

Unauthenticated Arbitrary File Upload and Remote Code Execution RCE vulnerabilities discovered by WordFence in WordPress Fancy Product Designer premium plugin versions = 4.6.8. Solution Update the WordPress Fancy Product Designer premium plugin to the latest available version at least 4.6.9...

VulnCheck KEV: CVE-2021-24370

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution...

CVE-2021-22705

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert...

CVE-2021-22705

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert...

Design/Logic Flaw

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert...

CVE-2021-22705

CVE-2021-22705 describes an Improper Restriction of Operations within the Bounds of a Memory Buffer that could allow denial of service or unauthorized access to system information when interacting with a driver installed by Schneider Electric’s Vijeo Designer or EcoStruxure Machine Expert. The co...