3516 matches found
Advantech WebAccess HMI/SCADA Software Persistence XSS Vulnerability
Advantech WebAccess HMI/SCADA software version 7.0-2012.12.05 suffers from a persistent cross site scripting vulnerability. Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor :...
Advantech Webaccess HMI/SCADA Software - Persistence Cross-Site Scripting
Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Schneider Modicon SCADA Ladder Logic Upload/Download
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
SCADA Modbus Client Utility Write Single Register
A vulnerability has been reported in Modbus Client Utility. The vulnerability is due to unauthenticated use of the Write Single Register command...
Schneider Modicon SCADA Remote START/STOP Command
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
Stuxnet is Back ! Iran reported another cyber attack
Iran claims to have repelled a fresh cyber attack on its industrial units in a southern province. In the last few years, various Iranian industrial, nuclear and government bodies have recently come under growing cyber attacks, widely believed to be designed and staged by the US and Israel. A powe...
Stuxnet is Back ! Iran reported another cyber attack
Iran claims to have repelled a fresh cyber attack on its industrial units in a southern province. In the last few years, various Iranian industrial, nuclear and government bodies have recently come under growing cyber attacks, widely believed to be designed and staged by the US and Israel. A powe...
SCADA Schneider Modicon Quantum Password Recovery
...
SCADA Siemens FactoryLink vrn.exe Opcode 9 Buffer Overflow
A stack buffer overflow in FactoryLink 7.5, 7.5 SP2, and 8.0.1.703. An attacker may be able to execute arbitrary code...
Ecava IntegraXor ActiveX Directory Traversal
Overview Independent researchers Billy Rios and Terry McCorkle have identified a Path Traversal vulnerability in the Ecava IntegraXor application. Ecava has produced an update that mitigates this vulnerability. The researchers have validated that the patch fixes this vulnerability. Affected...
7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050)
A buffer overflow vulnerability has been reported in SCADA IGSS Data Server IGSSdataServer.exe...
Hunting vulnerabilities in SCADA systems, we are still too vulnerable to cyber attacks
Stuxnet case is considered by security expert the first concrete act of cyber warfare, a malware specifically designed to hit SCADA systems inside nuclear plants in Iran. The event has alerted the international security community on the risks related to the effects of a cyber attack against...
Hunting vulnerabilities in SCADA systems, we are still too vulnerable to cyber attacks
Stuxnet case is considered by security expert the first concrete act of cyber warfare, a malware specifically designed to hit SCADA systems inside nuclear plants in Iran. The event has alerted the international security community on the risks related to the effects of a cyber attack against...
FBI Memo Shows Hackers Accessed Commercial HVAC Systems
An FBI memo says cyber intruders took advantage of weak credentialing in an industrial control system to gain control of a New Jersey air conditioning company’s heating, ventilation and air conditioning units. The cyber alert was issued July 23, 2012 but did not come to light until being posted...
Kelihos Update Includes New TLD and USB Infection Capabilities
There’s a little Michael Myers in the Kelihos botnet; maim it, kill it and it keeps on coming back to wreak more havoc. The 2011 takedown of the Kelihos botnet was one of Microsoft’s high-profile success stories against spambots and the like, yet Kelihos was back for more at the start of 2012 usi...
Advantech Studio 7.0 - SCADAHMI Directory Traversal
Advantech Studio 7.0 - SCADAHMI Directory Traversal Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day Google Dork: N/A Date: 2012-12-03 Exploit Author: Nin3 Vendor Homepage: http://advantech.com.tw Version: 7.0 Build Number 0501.1111.0402.0000 Tested on: Windows CVE : N/A '...
Advantech Studio 7.0 - SCADA/HMI Directory Traversal
Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day Google Dork: N/A Date: 2012-12-03 Exploit Author: Nin3 Vendor Homepage: http://advantech.com.tw Version: 7.0 Build Number 0501.1111.0402.0000 Tested on: Windows CVE : N/A ''' Advantech Studio v7.0 SCADA/HMI has a built in we...
Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day
Exploit for windows platform in category web applications Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day Google Dork: N/A Date: 2012-12-03 Exploit Author: Nin3 Vendor Homepage: http://advantech.com.tw Version: 7.0 Build Number 0501.1111.0402.0000 Tested on: Windows CVE :...
Citect SCADA ODBC Overflow Attempt (CVE-2008-2639)
...
Researcher Finds Nearly Two Dozen SCADA Bugs in a Few Hours' Time
It is open season on SCADA software right now. Last week, researchers at ReVuln, an Italian security firm, released a video showing off a number of zero-day vulnerabilities in SCADA applications from manufacturers such as Siemens, GE and Schneider Electric. And now a researcher at Exodus...