Rocky Linux 9 : ignition (RLSA-2022:8126)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8126 advisory. - A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only...

Exploit for CVE-2021-3129

Mass Scanner for CVE-...

Exploit for CVE-2021-3129

Mass Scanner for CVE-...

Inductive Automation Ignition XSS

The vulnerability of Inductive Automation Ignition’s software for industrial automation is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

Inductive Automation Ignition Code Execution

The vulnerability of Inductive Automation Ignition’s web server software-related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the target system or cause service failures...

Inductive Automation Ignition Code Execution

The vulnerability of Inductive Automation Ignition’s web server software-related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code remotely...

Laravel Ignition File Upload Vulnerability

Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of filegetcontents and fileputcontents...

PT-2023-8250

Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the...

PT-2023-8252

Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the ResponsePars...

PT-2023-8693

Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition affected versions not specified Description The issue is related to the getParams method in Inductive Automation Ignition, which allows remote attackers to execute arbitrary code on affected installations. This is...

PT-2023-8267

Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the ResponsePars...

Industrial Automation Ignition ParameterVersionJavaSerializationCodec Code Execution

The vulnerability of the ParameterVersionJavaSerializationCodec class in Inductive Automation Ignition software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the SYSTEM context...

Inductive Automation Ignition Code Execution

The vulnerability of the AbstractGatewayFunction class in Inductive Automation Ignition software relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

Inductive Automation Ignition JavaSerializationCodec Code Execution

The vulnerability of the JavaSerializationCodec class in the SCADA system of Inductive Automation Ignition is related to errors during data serialization. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with SYSTEM privileges...

PT-2023-8253 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the deserialization mechanism in the RunQuery class of Inductive Automation Ignition, allowing remote attackers to execute arbitrary code on...

PT-2023-8251 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the Base64Element class in Inductive Automation Ignition, which has flaws in its deserialization mechanism. This allows remote attackers to...

(0Day) Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server. The specific flaw exists within the...

PT-2023-26962 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the...

PT-2023-4355 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the ParameterVersionJavaSerializationCodec class in Inductive Automation Ignition, which is associated with weaknesses in the authentication...

(0Day) Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability. The specific flaw exists within the JavaSerializationCodec class. The issue results from the lack of prope...