14 matches found
EUVD-2026-51382
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2026-66669
A denial of service vulnerability in the Advantech ECU-1251D allows a network-adjacent attacker to send a DNP3 signal to the Digital Output address of the device, causing the DNP3Daemon to invoke a non-existent system file and enter an indefinite restart loop. While the device remains partially...
EUVD-2023-12941
Malicious code in bioql PyPI...
The vulnerability in the SCADA web interface of TelWin SCADA allows a hacker to read arbitrary files.
The vulnerability of the SCADA interface of TelWin SCADA is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...
CVE-2023-0956
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
CVE-2023-0956
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
Xxe
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
CVE-2023-0956
CVE-2023-0956 affects TEL-STER TelWin SCADA WebInterface, with a path traversal vulnerability (CWE-35) caused by external input not neutralizing path separators. This allows an unauthenticated, remote attacker to read files on affected systems. Affected versions span TelWin SCADA WebInterface 3.2...
TEL-STER TelWin SCADA WebInterface
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: TEL-STER Sp. z o. o. Equipment: TelWin SCADA WebInterface Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to read...
CVE-2023-0956: Improper Limitation of a Pathname to a Restricted Directory
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...
telwin.com XSS vulnerability
Vulnerable URL: http://www.telwin.com/en/prodotti/?id=816102=E=81====112|502|512|602|612&progliv1;=1&progliv2;=3&progliv3;=0&progliv4;=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...