CVE-2019-10972

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file .frc2. Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application i...

CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

PT-2025-20839 · Schneider Electric · Ecostruxure Power Build +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Stack-based Buffer Overflow issue exists that could allow local attackers to potentially execute arbitrary code when the end user opens a malicious project file provided by the attacker...

Drupal UEditor 安全漏洞

Drupal UEditor is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal UEditor that stems from a problem with the project files that affects usability...

Luxion KeyShot Viewer 缓冲区错误漏洞

Luxion KeyShot Viewer is a free, standalone desktop application from Luxion. Luxion KeyShot Viewer suffers from a buffer error vulnerability that stems from improper validation of user data when processing KSP files, resulting in memory corruption that could allow a remote attacker to execute...

CVE-2024-12741 Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File

A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that...

CVE-2024-47135

Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may...

CVE-2024-47134

Out-of-bounds write vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

CVE-2024-47134

Out-of-bounds write vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

CVE-2024-47136

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

CVE-2024-47136

CVE-2024-47136 is an out-of-bounds read vulnerability in Kostac PLC Programming Software (former Koyo) up to version 1.6.14.0. Opening a specially crafted KPP project file saved with version 1.6.9.0 or earlier can cause DoS, arbitrary code execution, or information disclosure due to parsing issue...

CVE-2024-47134

Out-of-bounds write vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

PT-2024-32429 · Kostac · Kostac Plc Programming

Name of the Vulnerable Software and Affected Versions: Kostac PLC Programming Software versions 1.6.14.0 and earlier Description: An out-of-bounds read vulnerability exists in the parsing of KPP project files. If a user opens a specially crafted project file saved using Kostac PLC Programming...

The vulnerability of RSLogix 5 and RSLogix 500 software’s VBA scripts allows a perpetrator to execute arbitrary code.

The vulnerability of RSLogix 5 and RSLogix 500 VBA scripts in software applications is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted RSP/RSS file for the proje...

PT-2024-29532 · Unknown +1 · Windo/I-Nv4 +1

Name of the Vulnerable Software and Affected Versions: WindLDR affected versions not specified WindO/I-NV4 affected versions not specified Description: A cleartext storage of sensitive information issue exists, allowing an attacker who obtains the product's project file to potentially gain user...

Panasonic Control FPWIN Pro 安全漏洞

Panasonic Control FPWIN Pro is a programming software from Panasonic Corporation Japan. A security vulnerability exists in Panasonic Control FPWIN Pro 7.7.2.0 and earlier versions, which originates from a stack-based buffer overflow vulnerability that could allow an attacker to execute arbitrary...

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system allows a intruder to gain unauthorized access to project files.

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to project files...

vulSystem

This repository appears to be a collection of tools and scripts for web scraping and data collection, likely used for research or analysis purposes. The tools are written in Python and utilize various libraries such as BeautifulSoup and requests. The repository contains several scripts, including...

PT-2024-36468 · Luxion · Luxion Keyshot Viewer

Name of the Vulnerable Software and Affected Versions: Luxion KeyShot Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this issue, where the...

PT-2024-22626 · Utau · Utau

Name of the Vulnerable Software and Affected Versions: UTAU versions prior to v0.4.19 Description: An OS command injection issue exists, allowing the execution of arbitrary OS commands if a user opens a crafted UTAU project file .ust file. Recommendations: For versions prior to v0.4.19, update to...