CVE-2025-9064: Improper Authentication

A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted...

EUVD-2015-1005

Malware in sbrugna...

EUVD-2015-1006

Malware in sbrugna...

EUVD-2018-2692

Malware in sbrugna...

EUVD-2021-15935

Malware in sbrugna...

EUVD-2019-7126

Malware in sbrugna...

EUVD-2017-5539

Malware in sbrugna...

EUVD-2017-5512

Malware in sbrugna...

EUVD-2021-15934

Malware in sbrugna...

EUVD-2022-35031

Malicious code in bioql PyPI...

EUVD-2022-35030

Malicious code in bioql PyPI...

EUVD-2022-35034

Malicious code in bioql PyPI...

EUVD-2022-35032

Malicious code in bioql PyPI...

EUVD-2022-35029

Malicious code in bioql PyPI...

CVE-2022-2793

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol...

CVE-2022-2792

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists...

CVE-2022-2791

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC...

CVE-2022-2790

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic PDT files and data blocks data BLD/BLK files...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2788

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...