Elipse E3 Scada PLC Denial Of Service

VSLA Security Advisory FIRE-SCADA-DOS-2013-001: Http DoS Requests Flooding Crash Device Vulnerabilities Elipse E3 Scada PLC. LEVEL: EXTREME In our tests authorized by the customer, we can stop the entire plant. Published: 10/29/2013 Version: 1.0 Vendor: Elipse...

DHS Releases Hundreds of Documents on Wrong Project Aurora

In response to a Freedom of Information Act request for information about the Operation Aurora attack on Google and other organizations in 2009 the Department of Homeland Security released hundreds of pages of documents related not to that attack campaign, but to the Aurora project run at Idaho...

Triangle MicroWorks SCADA Data Gateway < 3.3.729 Heartbeat Information Disclosure (Heartbleed)

Binary data scadatrianglegateway33729.nbin...

Dragonfly Russian Hackers Target 1000 Western Energy Firms

Gone are the days when cyber criminals focuses only on PCs to spread malwares and target people, whether it’s ordinary or a high profile person. Nowadays, organizations in the energy sector have become an interesting target for cyber minds. Few days ago, security researchers uncovered a...

ICONICS WebHMI ActiveX Stack Overflow

No description provided by source. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

Winlog Lite SCADA HMI system SEH 0verwrite Vulnerability

No description provided by source. Vuln Title: Winlog Lite SCADA HMI system SEH 0verwrite Vulnerability Author: FaryadR a.k.a Ciph3r tested on : winXp sp3 and Winlog Lite 2.06.17 Version Twitter : https://twitter.com/faryadR Mail : [email protected] Website : http://0c0c0c0c.com Vendor :...

KingView 6.5.3 SCADA ActiveX Exploit

No description provided by source. Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on...

sielco sistemi winlog 2.07.16 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Sielco Sistemi Winlog http://www.sielcosistemi.com/en/products/winlogscadahmi/ Versions: = 2.07.16 Platforms: Windows Bugs: A DbiGetRecordCount code execution B @Db@TDataSet@Close$qqrv code execution C DbiSetToRecordNo code execution ...

specview <= 2.5 build 853 - Directory Traversal

No description provided by source. Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introductio...

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE Buffer Overflow

No description provided by source. $Id: realwinscpcinitialize.rb 11180 2010-11-30 20:19:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

progea movicon / powerhmi <= 11.2.1085 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction ...

Sielco Sistemi Winlog <= 2.07.16 Buffer Overflow

No description provided by source. !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...

BACnet OPC Client Buffer Overflow

No description provided by source. $Id: bacnetcsv.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

BroadWin WebAccess SCADA/HMI Client Remote Code Execution

No description provided by source. html bBroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day/bbrbr WebAccess is the first fully web browser-based software package forbr human-machine interfaces HMI, and supervisory control and databr acquisition SCADA. bwocxrun.ocx ActiveX...

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_TXTEVENT Buffer Overflow

No description provided by source. $Id: realwinscpctxtevent.rb 11125 2010-11-24 13:44:46Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

sunway forcecontrol <= 6.1 sp3 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Sunway ForceControl http://www.sunwayland.com.cn/pro.asp Versions: = 6.1 sp3 with AngelServer and WebServer updated Platforms: Windows Bugs: various stack overflows directory traversals third party ActiveX code execution various Denia...

DATAC RealWin <= 2.0 (Build 6.1.8.10) Buffer Overflow Vulnerabilities

No description provided by source. Source: http://aluigi.org/adv/realwin1-adv.txt Luigi Auriemma Application: DATAC RealWin http://www.dataconline.com/software/realwin.php http://www.realflex.com Versions: = 2.0 Build 6.1.8.10 Platforms: Windows Bugs: A stack overflow in SCPCINITIALIZE and...

Advantech WebAccess HMI/SCADA Software Persistence XSS Vulnerability

No description provided by source. Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...

Interactive Graphical SCADA System Remote Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::Tcp def initializeinfo =...

BroadWin WebAccess Client Multiple Vulnerabilities

No description provided by source. Application: BroadWin WebAccess Client http://broadwin.com/Client.htm Versions: bwocxrun.ocx = 1.0.0.10 aka version 7.0 Platforms: Windows Bugs: A format string B arbitrary memory corruption Exploitation: remote Date: 02 Sep 2011 Author: Luigi Auriemma e-mail:...