CVE-2011-1918

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic...

CVE-2011-1919

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

CVE-2011-3320

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2011-1919

Vulnerability overview (CVE-2011-1919) : GE Intelligent Platforms Proficy Applications (pre-4.4.1 SIM 101 and pre-5.x before 5.0 SIM 43) contains a stack-based buffer overflow when processing crafted TCP messages. The affected components are Proficy Server Manager (PRProficyMgr.exe), Proficy Serv...

CVE-2011-3320

CVE-2011-3320 concerns the Web Administrator component of GE Intelligent Platforms Proficy Historian (4.x and earlier). The vulnerability arises from lack of server-side validation of query string parameters, enabling an attacker to inject and execute arbitrary client-side scripts via specially c...

PT-2011-3475

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Applications versions prior to 4.4.1 SIM 101 GE Intelligent Platforms Proficy Applications versions 5.x prior to 5.0 SIM 43 Description The issue is related to multiple stack-based buffer overflows that can be...

CVE-2011-1919: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

PT-2011-3474

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions prior to 3.5 SIM 17 GE Intelligent Platforms Proficy Historian versions 4.x prior to 4.0 SIM 12 Description The issue is related to a stack-based buffer overflow in the Data Archiver service,...

PT-2011-4388

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions 4.x and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters. Recommendations For GE...

CVE-2011-3320: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2011-1918: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic...

GE Intelligent Platforms Proficy Historian Data Archiver Buffer Overflow Vulnerability

Overview ICS-CERT originally released Advisory ICSA-11-243-03P on the US-CERT secure Portal on August 31, 2011. This web page release was delayed to allow users time to download and install the update. ICS-CERT received a report from GE Intelligent Platforms and the Zero Day Initiative concerning...

GE Proficy Historian Web Administrator XSS

Overview ICS-CERT originally released Advisory ICSA-11-243-02P on the US-CERT secure Portal on August 31, 2011. ICS-CERT has received a report from independent security researchers Billy Rios and Terry McCorkle concerning multiple cross-site scripting XSS vulnerabilities in the GE Intelligent...

rtipsniff.rb.txt

$Id: rtipsniff.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ MacbookPro:metasploit...

GE Proficy Real Time Information Portal Credentials Leak Sniffer (meta)

No description provided by source. $Id: rtipsniff.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

GE Proficy Real Time Information Portal - Credentials Leak Sniffer (Metasploit)

GE Proficy Real Time Information Portal - Credentials Leak Sniffer Metasploit $Id: rtipsniff.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

GE Proficy Real Time Information Portal Credentials Leak Sniffer (meta)

Exploit for unknown platform in category remote exploits ======================================================================= GE Proficy Real Time Information Portal Credentials Leak Sniffer meta ======================================================================= $Id: rtipsniff.rb This fil...

CVE-2008-0174

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges...

Design/Logic Flaw

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges...

CVE-2008-0175

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...