Notes on Self-Publishing a Book

In this post I would like to share a few thoughts on self-publishing a book, in case anyone is considering that option. As I mentioned in my post on burnout, one of my goals was to publish a book on a subject other than cyber security. A friend from my Krav Maga school, Anna Wonsley, learned that...

CVE-2018-7797

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert formerly Power Manager - EcoStruxure Power Monitoring Expert PME v8.2 all editions, EcoStruxure Energy Expert 1.3 formerly Power Manager, EcoStruxure Power SCADA Operation PSO 8.2 Advanced Reports and Dashboards...

Design/Logic Flaw

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert formerly Power Manager - EcoStruxure Power Monitoring Expert PME v8.2 all editions, EcoStruxure Energy Expert 1.3 formerly Power Manager, EcoStruxure Power SCADA Operation PSO 8.2 Advanced Reports and Dashboards...

CVE-2018-7797

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert formerly Power Manager - EcoStruxure Power Monitoring Expert PME v8.2 all editions, EcoStruxure Energy Expert 1.3 formerly Power Manager, EcoStruxure Power SCADA Operation PSO 8.2 Advanced Reports and Dashboards...

CVE-2018-7797

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert formerly Power Manager - EcoStruxure Power Monitoring Expert PME v8.2 all editions, EcoStruxure Energy Expert 1.3 formerly Power Manager, EcoStruxure Power SCADA Operation PSO 8.2 Advanced Reports and Dashboards...

CVE-2018-7797

The vulnerability CVE-2018-7797 is an Open Redirect in Schneider Electric EcoStruxure products, enabling a phishing-capable redirect to untrusted sites. Affected are PME/Energy Expert/PSO components: PME v8.2 (all editions), Energy Expert 1.3, PSO v8.2 AR&D, PME v9.0, Energy Expert v2.0, and PSO ...

CVE-2018-7797: URL Redirection to Untrusted Site

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert formerly Power Manager - EcoStruxure Power Monitoring Expert PME v8.2 all editions, EcoStruxure Energy Expert 1.3 formerly Power Manager, EcoStruxure Power SCADA Operation PSO 8.2 Advanced Reports and Dashboards...

PT-2018-2178

Name of the Vulnerable Software and Affected Versions EcoStruxure Power Monitoring Expert PME versions 8.2 through 9.0 EcoStruxure Energy Expert versions 1.3 through 2.0 EcoStruxure Power SCADA Operation PSO versions 8.2 through 9.0 Advanced Reports and Dashboards Module Description A URL...

Code Execution Vulnerability in Encrypted Video by Screen Recording Expert

Screen Recording Expert is a professional tool for making screen recordings. A code execution vulnerability exists when Screen Recording Expert encrypts videos. An attacker can exploit the vulnerability to execute code...

CVE-2018-7807

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

Path traversal

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

CVE-2018-7807

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

CVE-2018-7807

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

CVE-2018-7807

CVE-2018-7807 affects Schneider Electric StruxureWare Data Center Expert (Data Center Expert) up to version 7.5.0. Affected component: ZIP upload feature via the user interface that accepts ZIP files; root cause is a ZipSlip-like path traversal in Java code, enabling an authenticated user to uplo...

PT-2018-18287

Name of the Vulnerable Software and Affected Versions: Data Center Expert versions 7.5.0 and earlier Description: The issue allows for the upload of a malicious zip file from the user interface to the server, potentially containing path traversal file names. This could enable the arbitrary upload...

CVE-2018-7807: Improper Limitation of a Pathname to a Restricted Directory

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

expert-marketplace.de XSS vulnerability

Open Bug Bounty ID: OBB-701383 Description| Value ---|--- Affected Website:| expert-marketplace.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Denial of Service Vulnerability in Jiangmin Optimization Expert 4WfpNetLimiter.sys Driver

Jiangmin Optimization Expert is a completely free computer optimization software that is purely a tool. A denial of service vulnerability exists in the JM Optimization Expert 4WfpNetLimiter.sys driver. An attacker can cause a denial of service attack by sending a 0x00222408 request using the...

SwitchVPN For MacOS 2.1012.03 Privilege Escalation Exploit

Exploit for macOS platform in category local exploits ======================================================================= Title: Privilege Escalation Vulnerability Product: SwitchVPN for MacOS Vulnerable version: 2.1012.03 CVE ID: CVE-2018-18860 Impact: Critical Homepage: https://switchvpn.ne...

SwitchVPN for macOS 2.1012.03 - Privilege Escalation

======================================================================= Title: Privilege Escalation Vulnerability Product: SwitchVPN for MacOS Vulnerable version: 2.1012.03 CVE ID: CVE-2018-18860 Impact: Critical Homepage: https://switchvpn.net/ Identified: 2018-09-29 By: Bernd Leitner...