CVE-2024-12741 Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File

A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that...

CVE-2024-47135

Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may...

CVE-2024-47134

Out-of-bounds write vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

CVE-2024-47134

Out-of-bounds write vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

CVE-2024-47136

CVE-2024-47136 is an out-of-bounds read vulnerability in Kostac PLC Programming Software (former Koyo) up to version 1.6.14.0. Opening a specially crafted KPP project file saved with version 1.6.9.0 or earlier can cause DoS, arbitrary code execution, or information disclosure due to parsing issue...

CVE-2024-47136

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

CVE-2024-47134

Out-of-bounds write vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a...

PT-2024-32429 · Kostac · Kostac Plc Programming

Name of the Vulnerable Software and Affected Versions: Kostac PLC Programming Software versions 1.6.14.0 and earlier Description: An out-of-bounds read vulnerability exists in the parsing of KPP project files. If a user opens a specially crafted project file saved using Kostac PLC Programming...

The vulnerability of RSLogix 5 and RSLogix 500 software’s VBA scripts allows a perpetrator to execute arbitrary code.

The vulnerability of RSLogix 5 and RSLogix 500 VBA scripts in software applications is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted RSP/RSS file for the proje...

PT-2024-29532 · Unknown +1 · Windo/I-Nv4 +1

Name of the Vulnerable Software and Affected Versions: WindLDR affected versions not specified WindO/I-NV4 affected versions not specified Description: A cleartext storage of sensitive information issue exists, allowing an attacker who obtains the product's project file to potentially gain user...

Panasonic Control FPWIN Pro 安全漏洞

Panasonic Control FPWIN Pro is a programming software from Panasonic Corporation Japan. A security vulnerability exists in Panasonic Control FPWIN Pro 7.7.2.0 and earlier versions, which originates from a stack-based buffer overflow vulnerability that could allow an attacker to execute arbitrary...

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system allows a intruder to gain unauthorized access to project files.

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to project files...

vulSystem

This repository appears to be a collection of tools and scripts for web scraping and data collection, likely used for research or analysis purposes. The tools are written in Python and utilize various libraries such as BeautifulSoup and requests. The repository contains several scripts, including...

PT-2024-36468 · Luxion · Luxion Keyshot Viewer

Name of the Vulnerable Software and Affected Versions: Luxion KeyShot Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this issue, where the...

PT-2024-22626 · Utau · Utau

Name of the Vulnerable Software and Affected Versions: UTAU versions prior to v0.4.19 Description: An OS command injection issue exists, allowing the execution of arbitrary OS commands if a user opens a crafted UTAU project file .ust file. Recommendations: For versions prior to v0.4.19, update to...

PT-2024-28847 · National Instruments · Ni Instrumentstudio +1

Name of the Vulnerable Software and Affected Versions: NI FlexLogger versions prior to 2024 Q1 NI InstrumentStudio versions prior to 2024 Q1 Description: A deserialization of untrusted data issue exists in common code used by FlexLogger and InstrumentStudio, potentially resulting in remote code...

CVE-2023-49675

An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability...

CVE-2023-49676 CODESYS: Use after free vulnerability through corrupted project files

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability...

CVE-2023-49676 CODESYS: Use after free vulnerability through corrupted project files

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability...

CVE-2023-49676

CVE-2023-49676 affects CODESYS Development System (industrial automation tooling). A use-after-free in handling corrupted project files allows an unauthenticated local attacker to trick a user into opening a malicious project file, potentially crashing the system (availability impact noted). Some...