PT-2023-26962 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the...

PT-2023-4355 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the ParameterVersionJavaSerializationCodec class in Inductive Automation Ignition, which is associated with weaknesses in the authentication...

PT-2023-26963 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of Inductive Automation Ignition. Authentication is not required t...

PT-2023-4356 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the...

PT-2023-4337 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to errors in data serialization within the JavaSerializationCodec class of Inductive Automation Ignition. This allows remote attackers to execute...

PT-2023-26961 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Inductive Automation Ignition. Authentication is required to exploit...

(0Day) (Pwn2Own) Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OPC UA ConditionRefresh requests. By sending...

(Pwn2Own) Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability. The specific flaw exists within the Ignition Gateway server. The issue results from the exposure of a dangerou...

(Pwn2Own) Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(Pwn2Own) Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Exploit for CVE-2021-3129

CVE-2021-3129 Mass Scan Tools For Laravel = V8.4.2 Debug Mode...

Exploit for CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 Test Environment...

SUSE-SU-2023:2139-1 Security update for ignition

This update of ignition fixes the following issues: - rebuild the package with the go 19.9 secure release bsc1200441...

PT-2023-36160 · Ignition · Ignition

Name of the Vulnerable Software and Affected Versions: ignition affected versions not specified Description: The issue is related to a security concern that has been addressed by rebuilding the package with the go 19.9 secure release. Recommendations: At the moment, there is no information about ...

CVE-2023-25023

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saleswonder.Biz Webinar ignition plugin = 2.14.2 versions...

CVE-2023-25023

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saleswonder.Biz Webinar ignition plugin = 2.14.2 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saleswonder.Biz Webinar ignition plugin = 2.14.2 versions...

CVE-2023-25023

CVE-2023-25023: Auth. (admin+) Stored Cross-Site Scripting (XSS) in the WebinarIgnition WordPress plugin. The vulnerability affects versions

CVE-2023-25023: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saleswonder.Biz Webinar ignition plugin = 2.14.2 versions...

PT-2023-5838

Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition OPC UA Quick Client affected versions not specified Description This issue allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition. The specific flaw exists with...