s1.pkey.cn XSS vulnerability

Open Bug Bounty ID: OBB-153811 Description| Value ---|--- Affected Website:| s1.pkey.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ISC BIND NXDOMAIN Redirection Denial of Service Vulnerability

ISC BIND is prone to a remote denial of service vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

Mandriva Linux Security Advisory : bind (MDVSA-2013:202)

A vulnerability has been discovered and corrected in bind : The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of...

CVE-2013-2786

Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file...

Design/Logic Flaw

Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file...

CVE-2013-2786

Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file...

CVE-2013-2786

The CVE-2013-2786 issue affects Alstom Grid MiCOM S1 Agile (all versions up to and including 1.0.2) and legacy MiCOM S1 Studio, due to weak permissions in the MiCOM S1 Program Files directory that allow a local attacker to replace executables with Trojan horses. This local-privilege-escalation fl...

CVE-2013-2786: Undefined Security Weakness

Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file...

CVE-2013-0687

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse...

Code injection

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse...

CVE-2013-0687

The issue CVE-2013-0687 affects Schneider Electric MiCOM S1 Studio Software. The root cause is world-writable permissions set on executable files within the MiCOM S1 Studio installation, enabling a local attacker with access to replace executables in the program files directory. Consequences incl...

CVE-2013-0687

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse...

CVE-2013-0687: Undefined Security Weakness

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse...

Alstom Grid S1 Agile Improper Authorization

OVERVIEW This advisory provides mitigation details for a vulnerability affecting the Alstom Grid MiCOM S1 Agile and S1 Studio Software. Note: Alstom Grid MiCOM S1 Studio Software is its own software suite. A user could have MiCOM S1 Studio Software from a different vendor. This advisory only...

Schneider Electric MiCOM S1 Studio Improper Authorization Vulnerability

Overview This advisory provides mitigation details for a vulnerability affecting the Schneider Electric MiCOM S1 Studio Software. Independent researcher Michael Toecker of Digital Bond has identified an improper authorization vulnerability in the MiCOM S1 Studio Software using the Microsoft Attac...

Unfixed XSS vulnerability at s1.asmandez.ir

Security researcher Securitylab.ir, has submitted on 18/02/2011 a cross-site-scripting XSS vulnerability affecting s1.asmandez.ir, which at the time of submission ranked 66436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at s1.accesoperu.com

Security researcher s E t H - X-C3LL, has submitted on 15/02/2009 a cross-site-scripting XSS vulnerability affecting s1.accesoperu.com, which at the time of submission ranked 509692 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It...

Unfixed XSS vulnerability at s1.klansavaslari.net

Security researcher AVENUE-, has submitted on 06/03/2008 a cross-site-scripting XSS vulnerability affecting s1.klansavaslari.net, which at the time of submission ranked 8898 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Unfixed XSS vulnerability at s1.ba.gladiatus.org

Security researcher Saime, has submitted on 05/05/2008 a cross-site-scripting XSS vulnerability affecting s1.ba.gladiatus.org, which at the time of submission ranked 21544 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

Buffer overflow

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...