The vulnerability in the web interface for displaying the Ganglia monitoring system of the Fedora operating system allows a perpetrator to bypass the authentication process.

The vulnerability of the web interface for displaying the Ganglia monitoring system of the Fedora operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

Logic Vulnerability in Growatt Monitoring System App for Android

Growatt Monitoring System is a remote data monitoring center system for PV power plants developed by Grunewald. The system displays PV plant operation data through intuitive charts and graphs, including power plant power generation, revenue, CO2 emission reduction benefits, equipment operation...

Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple loopholes

Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple vulnerabilities Weak password in the background: also the initial password http://113.201.122.70:8080/Approval/System/Login.aspx...

Access Control Deficiencies and Remote Shared Buffer Leakage Vulnerabilities in the Southern Automated Monitoring System (SAMS)

South Deformation Monitoring System SMOS is a deformation monitoring system for monitoring various structures. The SMOS suffers from an Access Control Deficiency and Remote Shared Buffer Leakage vulnerability. An attacker could exploit the vulnerabilities to obtain sensitive information...

CVE-2017-6087

EyesOfNetwork (EON)

GE Bently Nevada 3500/22M Security Bypass Vulnerability

The GE Bently Nevada 3500/22M is a vibration monitoring system. A security bypass vulnerability exists in the GE Bently Nevada 3500/22M. Allowing an attacker to perform unauthorized operations...

SQL Injection Vulnerability in the mail_ID Parameter in the mail.do of Fuzhou Tranda Special Equipment Safety Monitoring System

Fuzhou Chuangda special equipment safety monitoring system using B / S structure, the use of J2EE for development, the system can run on any operating system platform, running into the server and client operation, the server runs the corresponding WEB APPLICATION services such as: TOMCAT, JBOSS,...

Ganglia Authentication Bypass Vulnerability

Ganglia is a cross-platform, scalable, distributed monitoring system for high-performance computing systems. Ganglia suffers from an authentication bypass vulnerability. An attacker can exploit the vulnerability to bypass the authentication mechanism and perform unauthorized actions...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Platform of Fujian SiChuang Software Co.

Fujian SiChuang Software Co., Ltd. flash flood disaster monitoring and early warning platform is mainly for flood control command system, flash flood disaster early warning system and other products, has been widely used in the Ministry of Water Resources Basin Committee and the provinces and...

SQL Injection Vulnerability in Fuzhou Tranda Special Equipment Safety Monitoring System

Fuzhou Chuangda special equipment safety monitoring system using B / S structure, the use of J2EE for development, the system can run on any operating system platform, running into the server and client operation, the server runs the corresponding WEB APPLICATION services such as: TOMCAT, JBOSS,...

The vulnerability of the HP SiteScope computing resource monitoring system allows a perpetrator to increase their privileges.

The vulnerability of the HP SiteScope computing resource monitoring system lies in the lack of access control for certain functions. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Solar-Log WEB monitoring system allows a malicious individual to execute arbitrary SQL commands.

Vulnerability allows remote attackers to execute arbitrary SQL commands using a specially crafted query...

SG8000 large rotating machine monitoring system /app/sg8k_rs/config/defaultuser.xml the system Super administrator account password information disclosure

No description provided by source...

S8000 rotating machinery online condition monitoring and analysis system /default. asp parameter username injection vulnerability

No description provided by source...

SG8000 large rotating machine monitoring system Alarm SMS module /sg8k_sms information disclosure

No description provided by source...

GE Bently Nevada 3500/22M Improper Authorization Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on September 8, 2016, and is being released to the NCCIC/ICS-CERT web site. GE has identified an improper authorization vulnerability in the GE Bently Nevada 3500/22M monitoring system. GE has produced a new firmwar...

Through the NVD vulnerability database to see recent vulnerability trends-vulnerability warning-the black bar safety net

2 0 1 6 years has been in the past less than half it's time over the past few years, the vulnerability analysis. The present article will be on the NVD vulnerability database over the last 5 years vulnerability analysis, look at the vulnerability of the development trend is like. Why the choice o...

The vulnerability of the WhatUp Gold monitoring system allows attackers to carry out attacks based on SQL injections.

The vulnerability of the DroneDeleteOldMeasurements implementation in the WhatUp Gold IT-infrastructure monitoring system is related to the lack of verification of the reliability of XML objects’ sequences. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out...

[SECURITY] [DLA 278-1] cacti security update

Package : cacti Version : 0.8.7g-1+squeeze7 CVE ID : CVE-2015-4634 Debian Bug : NA Several SQL injection vulnerabilities were discovered in cacti, a frontend to rrdtool for monitoring systems and service: CVE-2015-4634 SQL injection vulnerability in Cacti before 0.8.8e allows remote attackers to...

Hacking Team Promises to Rebuild RCS

The aftermath of the Hacking Team attack raised legitimate questions about the controversial Italian surveillance software vendor’s long-term viability. With reams of sensitive internal data and intellectual property posted online, how could the company survive? For now, however, the company seem...