Rockwell Automation ArmorStart 291EP 0.24-3.5A 291E-FAP-Gx Motor Starter

Binary data 753265.prm...

Rockwell Automation ArmorStart 281G 1.1-5.5A 281G-F12D-10C Motor Starter

Binary data 753280.prm...

Rockwell Automation ArmorStart 284A PF40 600V 1HP 284A-FVE1P7x-10 PointBus Motor Starter

Binary data 754657.prm...

Rockwell Automation ArmorStart 281A 0.5-2.5A 24VDC 281A-F12Z-10B PointBus Motor Starter

Binary data 754626.prm...

Rockwell Automation ArmorStart 283D 16A 24VDC 283D-F16Z-10C Motor Starter

Binary data 753150.prm...

devolo dLAN 550 duo+ Starter Kit Remote Code Execution

Summary Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative for any location without structured network wiring. Especially in buildings or residences lacking network cables or where updating the wiring would be expensive and...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12), ai.grakn:grakn (>=0.17.0, <=0.18.0) +14285 more potentially affected by CVE-2018-14720 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.11.2)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2018-14720 Source advisory: GHSA-X2W5-5M2G-7H5M...

PT-2018-14839

Name of the Vulnerable Software and Affected Versions JPress version 1.0-rc.5 Description The issue concerns stored XSS that can be triggered via the first three input fields. This is demonstrated by the web name parameter in the "/starter-tomcat-1.0/admin/setting" API endpoint. Recommendations F...

CVE-2018-19170: Improper Neutralization of Input During Web Page Generation

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...

ai.ylyue:yue-library-auth-service (>=j8.2.2.0, <=2.1.0), ai.ylyue:yue-library-data-redis (>=finchley.sr4, <=greenwich.sr2.1) +3422 more potentially affected by CVE-2018-1000613 via org.bouncycastle:bcprov-jdk15on (>=1.57, <=1.59)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.57, =j8.2.2.0, =finchley.sr4, =1.1.1.release, =1.1.1.release, =2.0.8, =2.0.8, =2.0.8, =2.4, =0.6.0, =1.0.7, =0.5.0, =0.1.0, =1.0.0, =3.0.3 and more Source cves: CVE-2018-1000613 Source advisory: GHSA-4446-656P-F54G...

app.myoss.wechat:wechat-starter-core (1.1.0.release), app.myoss.wechat:wechat-starter-mini-app (1.1.0.release) +87 more potentially affected by CVE-2018-1000632 via org.dom4j:dom4j (>=2.0.0-rc1, <=2.0.2)

org.dom4j:dom4j MAVEN version =2.0.0-rc1, =3.0.0, =0.0.5, =0.0.5, =0.0.5, =1.0.release, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.8 and more Source cves: CVE-2018-1000632 Source advisory: MEND:CVE-2018-1000632...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: MEND:CVE-2018-12432...

LocalTapiola: Reflected XSS of bbe-child-starter Theme via "value"-GET-parameter

This bug is related to 324442. And xss in other url. poc: https://www.lahitapiolarahoitus.fi/wp-content/themes/bbe-child-starter/bbe-engine/assets/actions/bbeopenhtmleditorpopup.php?attribute=%27%3C/script%3E%3Cbody%20onload&value=alertdocument.cookie Impact -Make admin-user run malicious...

Joomla Acymailing Starter 5.9.5 Component - CSV Macro Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Acymailing Starter 5.9.5 CSV Macro Injection Exploit Author: Sureshbabu Narvaneni Vendor Homepage: https://www.acyba.com Software Link: https://extensions.joomla.org/extension/acymailing-starter/ Affected...

Siemens Industrial Products (Update D)

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Industrial products Vulnerability: Improper Input Validation UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-17-339-01C Siemens Industrial Products that w...

cc.autoapi.pucong:auto-flow-core-flow (>=2.0.0, <=2.0.9), cc.autoapi.pucong:auto-flow-persistence (>=2.0.0, <=2.0.9) +179 more potentially affected by CVE-2016-4000 via org.python:jython-standalone (>=2.5.2, <=2.7.1b2)

org.python:jython-standalone MAVEN version =2.5.2, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =1.0.0, =1.3.0, =1.0, =1.0-m1, =1.0-m3, =0.2.13, =0.2.13, =1.0.0, =1.1.0 and more Source cves: CVE-2016-4000 Source advisory: MEND:CVE-2016-4000...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

aero.champ:cargojson (1.0), ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12) +17354 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (>=0.2.5, <=1.1.11)

ch.qos.logback:logback-core MAVEN version =0.2.5, =0.1.8, =0.1.6, =0.1.4-sb1x, =0.11.0, =0.7.0, =0.6.1, =0.11.0, =0.6.1, =0.13.0 and more Source cves: CVE-2017-5929 Source advisory: MEND:CVE-2017-5929...

Microsoft Excel Starter 2010 XML External Entity Injection Vulnerability

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems.Microsoft Excel Starter is the Microsoft Excel Starter. Microsoft Excel Starter 2010 suffe...

Microsoft Excel Starter 2010 XML External Entity Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================= www.microsoft.com Product: ============================ Microsoft Excel Starter 2010 EXCELC.EXE / "OFFICEVIRT.EXE" This is a bundled Excel "starter" version that comes 'pre-loaded'...