CVE-2015-1602

Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...

CVE-2015-1602: Exposure of Sensitive Information to an Unauthorized Actor

Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...

CVE-2015-0996: Exposure of Sensitive Information to an Unauthorized Actor

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 rely on a hardcoded cleartext password to control read access to Project files and Project Configuration files, which makes it easier for local users to obtain sensitive...

Siemens SIMATIC STEP 7 (TIA Portal) < 1300.100.2501.1 Multiple Vulnerabilities (SSA-315836)

Binary data scadasiemenstiamultiplevulnerabilitiesSSA-315836.nbin...

Siemens SIMATIC STEP 7 Security Bypass Vulnerability

Siemens SIMATIC is an automation software with a single engineering environment. A security vulnerability exists in Siemens SIMATIC STEP 7 due to device user privileged information in SIMATIC STEP 7 residing in an unprotected TIA Portal project, which allows an attacker to exploit the vulnerabili...

Siemens SIMATIC STEP 7 TIA Portal Password Hash Algorithm Security Vulnerability

Siemens SIMATIC is an automation software with a single engineering environment. A security vulnerability exists in Siemens SIMATIC STEP 7 TIA that allows an attacker to exploit the vulnerability to access TIA project files, reconstruct passwords or WEB server passwords...

Siemens SIMATIC STEP 7 Sensitive Information Disclosure Vulnerability

Siemens SIMATIC is an automation software with a single engineering environment. A sensitive information disclosure vulnerability exists in Siemens SIMATIC STEP 7, which allows attackers to exploit the vulnerability to gain access to sensitive information due to the use of an insecure hash...

PC SOFT WinDEV 11 - WDP File Parsing Stack Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24693/info PC SOFT WinDEV is prone to a stack-based buffer-overflow vulnerability when it attempts to process malformed project files. This issue occurs because the application fails to perform proper bounds-checking on...

Microsoft Visual Studio UserControl Remote Code Execution Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/16225/info Microsoft Visual Studio is prone to a vulnerability that could allow remote attackers to execute arbitrary code. This issue stems from a design flaw that executes code contained in a project file without first...

WinMerge 2.12.4 - Project File Handling Stack Overflow Vulnerability

No description provided by source. !/usr/bin/perl Title: WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability Vendor: Thingamahoochie Software Product web page: http://www.winmerge.org Affected version: 2.12.4.0 Unicode Summary: WinMerge is an Open Source differencing and merging...

Aesop GIF Creator <= 2.1 - (.aep) Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Exploit Title: Aesop GIF Creator = v2.1 .aep Buffer Overflow Exploit Date: 12/15/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsec at x-sploited.com Software Link: http://www.yukudr.com/h84561/aesopsetup.exe...

Sielco Sistemi Winlog PRO Buffer overflow Vulnerability

This host is installed with Sielco Sistemi Winlog PRO and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwinloglitebofvuln.nasl 5958 2017-04-17 09:02:19Z teissa $ Sielco Sistemi Winlog PRO Buffer overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

CyberLink Multiple Products File Project Handling Stack Buffer Overflow

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLink Power2Go 7 build 196...

Power2Go buffer overflow vulnerability

Overview Power2Go 8 contains a buffer overflow in the handling of project .p2g files, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description According to CyberLink's website, "Power2Go 8 features all the tools you need to easily copy all...

IRAI AUTOMGEN 8.0.0.7 - Use-After-Free

IRAI AUTOMGEN 8.0.0.7 - Use-After-Free Luigi Auriemma Application: IRAI AUTOMGEN http://www.irai.com/a8e/ Versions: = 8.0.0.7 aka 8.022 Platforms: Windows Bug: use after free Exploitation: file Date: 10 Oct 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2...

Altova DatabaseSpy 2011 Buffer Overflow

!/usr/bin/perl Title: Altova DatabaseSpy 2011 Project File Handling Buffer Overflow Vulnerability Vendor: Altova GmbH Product web page: http://www.altova.com Affected version: Enterprise Edition 2011 Summary: Altova DatabaseSpy® 2011 is the unique multi-database query, design, and database...

PT-2010-2062 · Microsoft · Producer +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Movie Maker versions 2.1 through 6.0 Microsoft Producer version 2003 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted project .MSWMM file. Recommendations: For Microsoft...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Moritz Jodeit reported an off-by-one error within the getunicodename function in libclamav/vbaextract.c when processing VBA project files CVE-2008-5050. Ilja van...

ClamAV < 0.94.1 get_unicode_name() Function Off-by-One Buffer Overflow (deprecated)

Binary data 4744.prm...

Acoustica Mixcraft 4.2 Build 98 - 'mx4' Local Buffer Overflow

!/usr/bin/perl Acoustica Mixcraft mx4 file Local Buffer Overflow Exploit Author: Koshi Date: 08-28-08 0day Application: Acoustica Mixcraft Versions: Possibly Older / 4.1 Build 96 / 4.2 Build 98 Site: http://acoustica.com/mixcraft/download.htm Tested On: Windows XP SP3 Fully Patched A vulnerabilit...