PT-2017-16356

Name of the Vulnerable Software and Affected Versions Belden Hirschmann GECKO Lite Managed switch versions 2.0.00 and prior Description An issue was discovered where a copy of the configuration file, including hashes of user passwords, is saved to an accessible location without authentication by...

CVE-2017-5161: Uncontrolled Search Path Element

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element DLL Hijacking vulnerability has been identified. Exploitation of this vulnerability could...

PT-2017-16355

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Lite SCADA Software versions prior to 3.02.01 Sielco Sistemi Winlog Pro SCADA Software versions prior to 3.02.01 Description An uncontrolled search path element, also known as DLL Hijacking, has been identified in the...

CMS Lite 1.3.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Dem...

CMS Lite 1.3.1 - SQL Injection

CMS Lite 1.3.1 - SQL Injection Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo:...

Sielco Sistemi Winlog Pro/ Winlog Lite DLL Load Local Code Execution Vulnerability

SIELCO SISTEMI Winlog is an application for data acquisition and remote control of SCADA HMI monitoring software. A local code execution vulnerability exists in Sielco Sistemi Winlog Pro and Winlog Lite. An attacker could exploit this vulnerability to execute arbitrary code in the affected...

CMS Lite 1.3.1 - SQL Injection

Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://www.cmslite.co.uk/ Version: 1.3.1 Tested on:...

Creative Management System CMS Lite 1.3.1 SQL Injection

Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://www.cmslite.co.uk/ Version: 1.3.1 Tested on:...

PCSC-Lite: Multiple vulnerabilities

Background PCSC-Lite is a middleware to access a smart card using the SCard API PC/SC. Description The SCardReleaseContext function normally releases resources associated with the given handle including “cardsList” and clients should cease using this handle. However, a malicious client can make t...

GLSA-201702-01 : PCSC-Lite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-01 PCSC-Lite: Multiple vulnerabilities The SCardReleaseContext function normally releases resources associated with the given handle including cardsList and clients should cease using this handle. However, a malicious clien...

Updated pcsc-lite packages fix security vulnerability

Once MSGRemoveContext is invoked via SCARDRELEASECONTEXT, cardsList is freed. A repeated invocation of SCARDRELEASECONTEXT with an empty context handle results in a use-after-free followed by a double-free. After MSGRemoveContext, invocation of SCardEstablishContext enable further use-after-free ...

MGASA-2017-0026 Updated pcsc-lite packages fix security vulnerability

Once MSGRemoveContext is invoked via SCARDRELEASECONTEXT, cardsList is freed. A repeated invocation of SCARDRELEASECONTEXT with an empty context handle results in a use-after-free followed by a double-free. After MSGRemoveContext, invocation of SCardEstablishContext enable further use-after-free ...

SUSE SLED12 / SLES12 Security Update : pcsc-lite (SUSE-SU-2017:0286-1)

pcsc-lite was updated to fix one security issue. This security issue was fixed : - CVE-2016-10109: This use-after-free and double-free issue allowed local attacker to cause a Denial of Service and possible privilege escalation bsc1017902. Note that Tenable Network Security has extracted the...

SUSE-SU-2017:0286-1 Security update for pcsc-lite

pcsc-lite was updated to fix one security issue. This security issue was fixed: - CVE-2016-10109: This use-after-free and double-free issue allowed local attacker to cause a Denial of Service and possible privilege escalation bsc1017902...

Ubuntu: Security Advisory (USN-3176-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : PCSC-Lite vulnerability (USN-3176-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3176-1 advisory. Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash,...

USN-3176-1: PCSC-Lite vulnerability

Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash, resulting in a denial of service, or possibly execute arbitrary code with root privileges...

openSUSE Security Update : pcsc-lite (openSUSE-2017-106)

pcsc-lite was updated to fix one security issue. This security issue was fixed : - CVE-2016-10109: This use-after-free and double-free issue allowed local attacker to cause a Denial of Service and possible privilege escalation bsc1017902. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 24 : pcsc-lite (2017-8311440c55)

New upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 24 Update: pcsc-lite-1.8.20-1.fc24

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...