Schneider Electric SoMachine Basic and Schneider Electric Modicon TM221CE16R Security Bypass Vulnerability

Schneider Electric SoMachine Basic and Schneider Electric Modicon TM221CE16R are both products of Schneider Electric France. The former is a programming and debugging interface for all components on the control platform; the latter is a programmable controller. A security vulnerability exists in...

Uploadr - Project Files Management /search of SQL injection

Uploadr - Project Files Management /search of the presence of SQL injection Injection point: http://download.lagunaproperty.com/search?keyword=SQL error-based payload: /search? keyword=1%' AND SELECT 2IFSELECT FROM SELECT CONCATmd5233,0x716b717871,SELECT ELT4271=4271,1,0x7170707071,0x78s,...

Uploadr - Project Files Management /download at SQL injection

Uploadr - Project Files Management /download at the presence of SQL injection Injection point: http://download.lagunaproperty.com/download?file=SQL error-based payload: /download? file=1%' AND SELECT 2IFSELECT FROM SELECT CONCATmd5233,0x716a767a71,SELECT ELT4943=4943,1,0x7176716b71,0x78s,...

CVE-2017-2374

An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projects" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted GarageBand project file...

CVE-2017-2372

An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted GarageBan...

CVE-2017-2372

An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted GarageBan...

CVE-2016-9354

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

Uploadr - SQL Injection

Uploadr - SQL Injection Exploit Title: Uploadr - Project Files Management - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://lagunaproperty.com/ Software Buy: https://codecanyon.net/item/uploadr-project-files-management/13545125 Demo: http://download.lagunaproperty.com/...

CVE-2016-7960

Siemens SIMATIC STEP 7 TIA Portal before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors...

CVE-2016-7959

Siemens SIMATIC STEP 7 TIA Portal before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to a file and conducting a brute-force attack...

Siemens SIMATIC STEP 7 suffers from an information disclosure vulnerability (CNVD-2016-08768)

Siemens SIMATIC is an automation software with a single engineering environment. An information disclosure vulnerability exists in Siemens SIMATIC STEP 7 V12 and V13. A local attacker can exploit the vulnerability to read TIA project files by brute-force breaking the pre-shared key, resulting in...

Buffer Overflow Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation RSLogix Micro Starter Lite and others are configuration software used in automation products from Rockwell Automation. A buffer overflow vulnerability exists in several Rockwell Automation products. The vulnerability can be exploited by remote attackers to execute arbitrary co...

WECON LeviStudio Address Name Heap Buffer Overflow

The vulnerability is due to improper parsing of XML Address Name attribute of LeviStudio project files. A remote attacker could exploit this vulnerability by enticing a user to open a crafted project. Successful exploitation could allow the attacker to execute arbitrary code under the security...

Schneider Electric GP-Pro EX ParseAPI Heap Buffer Overflow

A heap buffer overflow vulnerability exists in Schneider Electric GP-Pro EX. This is due to input validation errors when parsing project files. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted project file...

The vulnerability of the ABB PCM600 control and configuration device allows a intruder to gain access to user passwords.

The vulnerability of the ABB PCM600 control and configuration device lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to the passwords of the IEC61850 OPC server by analyzing the System.xml...

(0Day) WECON LeviStudio ScreenInfo ScrnName Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WECON LeviStudio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of...

(0Day) WECON LeviStudio BaseSet HMINAME Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WECON LeviStudio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of...

Panasonic FPWIN Pro OPNISAMX Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsing of...

Schneider Electric InduSoft Web Studio Arbitrary Code Execution Vulnerability

Schneider Electric InduSoft Web Studio is an embedded HMI software package.Remote Agent is one of the remote agent components. A security vulnerability in Schneider Electric InduSoft Web Studio's handling of Indusoft Project files allows an attacker to construct a malicious file and trick an...

CVE-2015-1602

Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...