CVE-2018-7519

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

Stack overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

Heap overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

Out-of-bounds

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

CVE-2018-7517

CVE-2018-7517 relates to Omron CX-Supervisor, where parsing malformed SCS project files can trigger an out-of-bounds write in the file parsing code (affecting CX-Supervisor versions 3.30 and prior; ICS update notes 3.40 and prior). The vulnerability potentially enables remote code execution when ...

CVE-2018-7513

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

CVE-2018-7523

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

Omron CX-Supervisor Free Use Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A free use vulnerability exists in Omron CX-Supervisor version 3.30, which can be exploited by an attacker to gain free use when CX Supervisor analyz...

The vulnerability of the microprogramming software of Siemens SIMATIC STEP 7 (TIA Portal) arises from the improper storage of common keys in TIA project files. This allows attackers to gain access to confidential information.

The vulnerability of the microprogramming software of Siemens SIMATIC STEP 7 TIA Portal is related to the improper storage of common keys in TIA project files. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to confidential information...

Delta Industrial Automation PMSoft Stack Buffer Overflow Vulnerability

Delta Industrial Automation is a global industrial automation manufacturer of power management and thermal solutions. WPLSoft and PMSoft are Delta's PLC programming software. A stack buffer overflow vulnerability exists in the parsing of information from TTreeView objects in newly formatted ppm...

Fuji Electric Monitouch V-SFT Project File Parsing Heap Buffer Overflow Vulnerability

Fuji Electric Monitouch V-SFT is an HMI software. A security vulnerability in Fuji Electric Monitouch V-SFT parsing V8 project files allows remote attackers to exploit the vulnerability by submitting a specially crafted file, which can be tricked into being parsed by the user to execute arbitrary...

Schneider Electric SoMachine Basic and Schneider Electric Modicon TM221CE16R Security Bypass Vulnerability

Schneider Electric SoMachine Basic and Schneider Electric Modicon TM221CE16R are both products of Schneider Electric France. The former is a programming and debugging interface for all components on the control platform; the latter is a programmable controller. A security vulnerability exists in...

Uploadr - Project Files Management /search of SQL injection

Uploadr - Project Files Management /search of the presence of SQL injection Injection point: http://download.lagunaproperty.com/search?keyword=SQL error-based payload: /search? keyword=1%' AND SELECT 2IFSELECT FROM SELECT CONCATmd5233,0x716b717871,SELECT ELT4271=4271,1,0x7170707071,0x78s,...

Uploadr - Project Files Management /download at SQL injection

Uploadr - Project Files Management /download at the presence of SQL injection Injection point: http://download.lagunaproperty.com/download?file=SQL error-based payload: /download? file=1%' AND SELECT 2IFSELECT FROM SELECT CONCATmd5233,0x716a767a71,SELECT ELT4943=4943,1,0x7176716b71,0x78s,...

CVE-2017-2374

An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projects" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted GarageBand project file...

CVE-2017-2372

An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted GarageBan...

CVE-2017-2372

An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted GarageBan...

CVE-2016-9354

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

Uploadr - SQL Injection

Uploadr - SQL Injection Exploit Title: Uploadr - Project Files Management - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://lagunaproperty.com/ Software Buy: https://codecanyon.net/item/uploadr-project-files-management/13545125 Demo: http://download.lagunaproperty.com/...

CVE-2016-7960

Siemens SIMATIC STEP 7 TIA Portal before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors...