Advantech WebAccess Authentication Bypass Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An authentication bypass vulnerability exists in Advantech...

The vulnerability of the Embedded Web Server allows a perpetrator to gain control over the device remotely or locally.

The vulnerability of Embedded Web Servers is related to deficiencies in authentication procedures. Embedded Web Servers, used by multiple routers and devices, do not check or process SYN Flood or FIN Flood packets during transmission. They also do not request any authentication parameters, which...

LfSoOxxBtKDnFHl

A Remote Browser's Agent XSS is a piece of software that allows a remote "operator" to control a browser as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, "XSS" software is usually associated with criminal or malicious activity...

Faulty Firmware Auto-Update Breaks Hundreds of 'Smart Locks'

More features, more problems! Today, we are living in a digital age that is creating a digital headache for people by connecting every other unnecessary home appliance to the Internet. Last week, nearly hundreds of Internet-connected locks became inoperable after a faulty software update hit some...

How Just Opening A Malicious PowerPoint File Could Compromise Your PC

A few months back we reported how opening a simple MS Word file could compromise your computer using a critical vulnerability in Microsoft Office. The Microsoft Office remote code execution vulnerability CVE-2017-0199 resided in the Windows Object Linking and Embedding OLE interface for which a...

CVE-2017-10815

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

Authentication flaw

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

CVE-2017-10815

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

CVE-2017-10815

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

Siemens 300/400 Series PLC Remote Control Vulnerability

Programmable controller PLC is developed on the basis of relay control and computer control, and gradually developed into a new type of industrial automatic control device based on microprocessor and integrating modern technologies such as computer technology, automatic control technology and...

CVE-2017-10815: Improper Authentication

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

PT-2017-11523

Name of the Vulnerable Software and Affected Versions MaLion for Windows versions 5.2.1 and earlier MaLion for Mac versions 4.0.1 through 5.2.1 Description The issue allows remote attackers to bypass authentication and execute arbitrary commands or operations on Terminal Agent when the "Remote...

Design/Logic Flaw

The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs...

DiskBoss Enterprise 8.2.14 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: DiskBoss Enterprise v8.2.14 Remote buffer overflow Date: 2017-07-30 Exploit Author: Ahmad Mahfouz Author Homepage: www.unixawy.com Vendor Homepage: http://www.diskboss.com/ Software Link:...

The Segway miniPRO balance of the car vulnerability research-exploit warning-the black bar safety net

Segway miniPRO Electric balance car presence of a critical security vulnerability, a malicious attacker could exploit the vulnerability may completely control the balance of the car. IOActive latest study found that Segway miniPRO Electric balance of the car in the presence of a critical security...

Bad Code Library Triggers Devil's Ivy Vulnerability in Millions of IoT Devices

Tens of millions of products ranging from airport surveillance cameras, sensors, networking equipment and IoT devices are vulnerable to a flaw that allows attackers to remotely gain control over devices or crash them. The vulnerability, dubbed Devil’s Ivy, was identified by ​researchers at Senrio...

Hackers Could Easily Take Remote Control of Your Segway Hoverboards

If you are hoverboard rider, you should be concerned about yourself. Thomas Kilbride, a security researcher from security firm IOActive, have discovered several critical vulnerabilities in Segway Ninebot miniPRO that could be exploited by hackers to remotely take "full control" over the hoverboar...

CHAOS Framework - Generate Payloads and Control Remote Machines

CHAOS Framework allows generate payloads and controls remote machines. DISCLAIMER The use of the CHAOS Framework is COMPLETE RESPONSIBILITY of the END-USER. Developer assumes NO liability and is NOT responsible for any misuse or damage caused by this program. FEATURES Windows Remote Control...

Weak Password Vulnerability in DebugShell of Various ZTE OLT PON Devices

ZTE OLT C200, C220, C300, and C320 are key PON devices used in optical switching networks in the telecommunications industry. A weak password vulnerability exists in DebugShell of various ZTE OLT PON devices, which can be exploited by an attacker to add passwords for daily operation accounts,...

Katyusha Scanner — Telegram-based Fully Automated SQL Injection Tool

A new powerful hacking tool recently introduced in an underground forum is making rounds these days, allowing anyone to rapidly conduct website scans for SQL injection flaws on a massive scale — all controlled from a smartphone using the Telegram messaging application. Dubbed Katyusha Scanner, th...