CVE-2012-4355

Summary (CVE-2012-4355) : TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA <2.07.18 and Winlog Lite SCADA

CVE-2012-4359

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service invalid 0x00 write operation and daemon crash or possibly have unspecified other impact via a...

CVE-2012-4354

CVE-2012-4354 affects TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA (before 2.07.17) and Winlog Lite SCADA (before 2.07.17). The vulnerability arises from a port-46824 TCP packet containing a crafted positive integer after the opcode, which triggers incorrect function-pointer processing and...

CVE-2012-4354

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

CVE-2012-4357

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

CVE-2012-4359

Summary (CVE-2012-4359): Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 fail to validate the return value of realloc, enabling a remote attacker to cause a denial of service (invalid 0x00 write) and daemon crash. This may occur via a port-46824 TCP packet cont...

CVE-2012-4358

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 (and related 2.07.18 variants) are affected by a vulnerability where the realloc return value is not validated. This can allow remote attackers to cause a denial of service (invalid 0x00 write operation and daemon...

CVE-2012-4357

CVE-2012-4357 describes an array index error in Sielco Sistemi Winlog Pro SCADA (before 2.07.17) and Winlog Lite SCADA (before 2.07.17) that enables remote code execution. An attacker can reference an invalid file-pointer index within a port-46824 TCP packet, triggering execution of an EnterCriti...

Scientific Linux Security Update : pcsc-lite on SL5.x i386/x86_64

Multiple buffer overflow flaws were discovered in the way the pcscd daemon, a resource manager that coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially crafted request that would cause the pcscd...

CVE-2012-3815

CVE-2012-3815 is complemented by Red Hat CVE-2012-4353, documenting a stack-based buffer overflow in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17. The flaw allows remote code execution via a crafted port-46824 TCP packet that triggers an incorrect file-open ...

Sielco Sistemi Winlog Buffer Overflow <= v2.07.14

!/usr/bin/ruby --------------------------------------------- Sielco Sistemi Winlog Buffer Overflow = v2.07.14 - Buffer overflow vulnerability Date: 04.06.2012 --------------------------------------------- - Description Winlog Lite is the entry level version of the SCADA/HMI software Winlog Pro...

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow

!/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link: http://www.sielcosistemi.com/en/download/public/winloglite.html Version: 2.07.14...

WordPress Pretty Link Lite Plugin SQLi / XSS Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

Pretty Link Lite <= 1.5.3 - Cross-Site Scripting (XSS)

The Pretty Links – Link Management, Branding, Tracking & Sharing Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Pretty Link Lite 1.5.2 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Plugin Pretty Link Lite 1.5.2 - SQL Injection Cross-Site Scripting

WordPress Plugin Pretty Link Lite 1.5.2 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/53531/info Pretty Link Lite plugin for WordPress is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied...

WordPress Pretty Link Lite Plugin 1.5.2 - SQL Injection and Cross Site Scripting Vulnerabilities

Pretty Link Lite plugin is prone to multiple cross-site scripting and SQL-injection vulnerabilities because of failure to properly clean up user-supplied input. It allows an attacker to steal cookie-based authentication credentials, access or modify data, compromise the application or exploit...

WordPress Plugin Pretty Link Lite 1.5.2 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/53531/info Pretty Link Lite plugin for WordPress is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow an attacker to steal cookie-based...

Joomla nBill Lite Cross Site Scripting

TITLE ....... nBill Lite - Joomla component HTML Injection / XSS DATE ........ 07.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http:// VERSION ..... TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the type o...

CVE-2012-1801

Multiple stack-based buffer overflows in 1 COM and 2 ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data...