CVE-2018-7233

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'modelname' or 'macaddress'...

CVE-2018-7235

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sdfile'...

iSumsoft ZIP Password Refixer 3.1.1 - Buffer Overflow

iSumsoft ZIP Password Refixer 3.1.1 - Buffer Overflow author = ''' Created: ScrR1pTK1dd13 Name: Greg Priest Mail: [email protected] Exploit Title:iSumsoft Local Buffer Overflow Vuln. 0daySEH Date: 2018.03.02 Exploit Author: Greg Priest Version: iSumsoft ZIP Password Refixer Version...

iSumsoft ZIP Password Refixer 3.1.1 - Buffer Overflow

author = ''' Created: ScrR1pTK1dd13 Name: Greg Priest Mail: [email protected] Exploit Title:iSumsoft Local Buffer Overflow Vuln. 0daySEH Date: 2018.03.02 Exploit Author: Greg Priest Version: iSumsoft ZIP Password Refixer Version 3.1.1 Tested on: Windows7 x64 HUN/ENG Professional '''...

Schneider Electric Pelco Sarix Professional elevation of privilege vulnerability (CNVD-2018-05321)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67. A remote attacker could use this vulnerability to bypass...

Schneider Electric Pelco Sarix Professional Information Disclosure Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67. The vulnerability can be exploited by an attacker to obtain...

Schneider Electric Pelco Sarix Professional Arbitrary File Deletion Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67, which originates from the /login/bin/setparam program failing ...

Schneider Electric Pelco Sarix Professional Elevation of Privilege Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67, which stems from the program's use of hard-coded credentials....

Schneider Electric Pelco Sarix Professional Web interface component XML entity injection vulnerability

Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric, France.Web interface is one of the web management interfaces. An XML entity injection vulnerability exists in the import.cgi file of the Web interface component in the Schneider Electric Pelco Sari...

Schneider Electric Pelco Sarix Professional Unauthorized Operation Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67, which stems from the program failing to perform authentication...

Schneider Electric Pelco Sarix Professional Command Execution Vulnerability (CNVD-2018-05326)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...

Schneider Electric Pelco Sarix Professional Buffer Overflow Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A buffer overflow vulnerability exists in the web-based GUI in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67. A remote attacker could exploit...

Schneider Electric Pelco Sarix Professional Command Execution Vulnerability (CNVD-2018-05325)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...

Schneider Electric Pelco Sarix Professional Arbitrary File Download Vulnerability (CNVD-2018-05328)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67, which stems from the /cgi-bin/ssldownload.cgi program failing...

Human Factor Podcast: Jenny Radcliffe and Chris Boyd

A little while ago, I was invited to take part in Jenny Radcliffe's Human Factor Podcast. With 44 episodes strong and counting!, Jenny spends an hour or so talking at length with her guests who are professional investigators, security advocates, all-round educators, tireless consultant/conference...

Cross site request forgery (csrf)

OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....

Carbon Black’s Victor Baez Recognized as a 2018 CRN Channel Chief

CRN®, a brand of The Channel Company, has named Victor Baez, Vice President, WW Channels of Carbon Black, to its prestigious list of 2018 Channel Chiefs. The executives on this annual list represent top leaders in the IT channel who excel at driving growth and revenue in their organization throug...

Description of the security update for Project Server 2013: February 13, 2018

Description of the security update for Project Server 2013: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

SUPERAntiSpyware Professional Trial Denial of Service Vulnerability (CNVD-2018-02916)

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SASKUTIL.SYS driver file in SUPERAntiSpyware Professional Trial version 6.0.1254, which originates from the program's...

SUPERAntiSpyware Professional Trial Elevation of Privilege Vulnerability

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SUPERAntiSpyware.exe file in SUPERAntiSpyware Professional Trial version 6.0.1254. An attacker can exploit this...