IIoT Monitor Path Traversal Vulnerability

Schneider Electric IIoT Monitor is an industrial IoT monitor from Schneider Electric France. A path traversal vulnerability exists in Schneider Electric IIoT Monitor version 3.1.38. An attacker could exploit this vulnerability to access files that are accessible to the system user...

Path traversal

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user...

EMC Data Protection Advisor ScheduledReportResource Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Data Protection Advisor. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within...

Adups Local Information Disclosure Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from a local information disclosure vulnerability. The vulnerability is caused by the AndroidManifest.xml file of the...

Acunetix WVS 10 - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits ''' ======================================================================== Acunetix WVS 10 - from guest to Sytem Local privilege escalation CVE: CVE-2015-4027 Author: me Daniele Linguaglossa Affected Product: Acunetix WVS 10 Exploit: Local...

RhinoSoft Serv-U FTPd Server 345 - MDTM Command Time Argument Buffer Overflow (4)

RhinoSoft Serv-U FTPd Server 345 - MDTM Command Time Argument Buffer Overflow 4 // source: https://www.securityfocus.com/bid/9751/info Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command...

Security Update For Exchange Server 2019 (KB4471389)

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. An attacker could then install programs;...