Design/Logic Flaw

The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649...

Code injection

Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service unhandled runtime exception and application crash via a crafted Indusoft Project file...

CVE-2015-7374

The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649...

CVE-2015-7375

Schneider Electric InduSoft Web Studio is affected by CVE-2015-7375. The vulnerability arises in the handling/parsing of Indusoft Project files, allowing remote code execution or a denial of service (unhandled runtime exception and application crash) in InduSoft Web Studio before version 8.0. Pub...

CVE-2015-7374

CVE-2015-7374 affects Schneider Electric InduSoft Web Studio via the Remote Agent component (Windows). The vulnerability enables remote code execution due to lack of authentication on the Remote Agent service (TCP port 1234), allowing remote API calls to be executed with the process’s privileges....

CVE-2015-7374

The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649...

CVE-2015-7375

Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service unhandled runtime exception and application crash via a crafted Indusoft Project file...

Orient Technologies Studio for OrientDB Server Community Edition Random Number Generation Vulnerability

Orient Technologies Studio for OrientDB Server Community Edition is a community edition of OrientDB Server from Orient Technologies, UK. A problem with Orient Technologies Studio for OrientDB Server Community Edition random number generation allows remote attackers to exploit vulnerabilities to...

Orient Technologies Studio for OrientDB Server Community Edition Cross-Site Request Forgery Vulnerability

Orient Technologies Studio for OrientDB Server Community Edition is a community edition of OrientDB Server from Orient Technologies, UK. A cross-site request forgery vulnerability exists in Orient Technologies Studio for OrientDB Server Community Edition, which allows remote attackers to construc...

Apple iTunes < 12.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.3. It is, therefore, affected by multiple vulnerabilities in the bundled versions of WebKit, CoreText, the Microsoft Visual Studio C++ Redistributable Package, and ICU. Note that Nessus has not tested for these issues...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality of...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality of...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component within the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality o...

OrientDB and Studio prior to version 2.1.1 contain multiple vulnerabilities

Overview Studio for OrientDB Server Community Edition version prior to version 2.1.1 contains several vulnerabilities. Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2015-2912The Studio web interface to OrientDB contains a CSRF vulnerability. An attacker can perform actions with the...

NetRipper - Smart Traffic Sniffing for Penetration Testers

NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after decryption. NetRipp...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

InduSoft Web Studio Detection (Windows SMB Login)

Detects the installed version of InduSoft Web Studio. The script logs in via smb, searches for InduSoft Web Studio in the registry and gets the version from SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

VideoCharge Studio - Local Buffer Overflow (SEH) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'VideoCharge Studio Buffer Overflow SEH', 'Description' = %q This module exploits a stack based buffer overflow in VideoCharge Studio...

VideoCharge Studio Buffer Overflow (SEH) Exploit

This Metasploit module exploits a stack based buffer overflow in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC file. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine by enticing a user of VideoCharge Studio to open...