NEC Platforms Calsos CSDX and CSDJ Series Access Restriction Bypass Vulnerability

NEC Platforms Calsos CSDX and CSDJ are both remote monitoring devices from NEC Platforms Japan. A security vulnerability exists in the NEC Platforms Calsos CSDX and CSDJ series products. A remote attacker could exploit the vulnerability to bypass access restrictions and perform arbitrary operatio...

agrisoln (1.0.0), drafty (>=0.1.14, <=0.2.37) +1 more potentially affected by unknown CVE via react-svg (>=2.1.10, <=2.1.22)

react-svg NPM version =2.1.10, =0.1.14, =0.2.37 - pcs-remote-monitoring-webui 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8XQR-4CPM-WX7G...

agrisoln (1.0.0), drafty (>=0.1.14, <=0.2.37) +1 more potentially affected by unknown CVE via react-svg (>=2.1.10, <=2.1.22)

react-svg NPM version =2.1.10, =0.1.14, =0.2.37 - pcs-remote-monitoring-webui 1.0.0 Source cves: unknown CVE Source advisory: GHSA-8XQR-4CPM-WX7G...

ABB SREA-50 Communications Adapter Detection

Binary data 761514.prm...

Schweitzer Engineering Laboratories Programmable Automation Controller PLC Detection

Binary data 755333.prm...

On Surveillance in the Workplace

Data & Society just published a report entitled "Workplace Monitoring & Surveillance": This explainer highlights four broad trends in employee monitoring and surveillance technologies: Prediction and flagging tools that aim to predict characteristics or behaviors of employees or that are designed...

How to Attack and Defend a Prosthetic Arm

The IoT world has long since grown beyond the now-ubiquitous smartwatches, smartphones, smart coffee machines, cars capable of sending tweets and Facebook posts and other stuff like fridges that send spam. Today's IoT world now boasts state-of-the-art solutions that quite literally help people...

iKeyMonitor Spy App for iPhone and Android: Best Remote Monitoring Tool

By Carolina Nowadays, it has become a social rule to own a smartphone, and humanity has become more dependent on social networks than ever before. We need to be connected to the Internet at all times and we publish our most private and personal thoughts there. Even in social events people spend...

Arbitrary File Upload Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Coal mine remote monitoring integrated management system is a comprehensive monitoring and management system that remotely monitors all the sensing data of coal mine underground in real time through the Internet and summarizes, analyzes and alarms them in time. Sichuan Institute of Safety Science...

SQL Injection Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

CVE-2018-14324: Use of Hard-coded Credentials

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664: Relative Path Traversal

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

PT-2018-8521

Name of the Vulnerable Software and Affected Versions ABB SREA-01 versions up to 3.31.5 ABB SREA-50 version up to 3.32.8 Description The issue allows an attacker to access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without authorization over the network. This is...

VBWinExec Arbitrary Command Execution

The vulnerability of the VBWinExec function Node\AspVBObj.dll in the software for remote monitoring of Advantech WebAccess is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

ChkAdminViewUsrPwd1 Component Code Execution

The vulnerability of the ChkAdminViewUsrPwd1 component mailPg.asp in the Advantech WebAccess remote monitoring software is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the ProjectName and...

Somebody’s watching! When cameras are more than just ‘smart’

Every year the number of smart devices grows. Coffee machines, bracelets, fridges, cars and loads of other useful gadgets have now gone smart. We are now seeing the emergence of smart streets, roads and even cities. Devices such as smart cameras have long been part of everyday life for many, as...

Advantech WebAccess XSS

The software of the remote monitoring system Advantech WebAccess is vulnerable because measures are not taken to protect the structure of the web page during authentication cross-site scripting attacks. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML...

Advantech WebAccess Auth Bypass RCE

The vulnerability of the Advantech WebAccess remote monitoring software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created requests...