PT-2017-17574

Name of the Vulnerable Software and Affected Versions GamePanelX-V3 version 3.0.12 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data passed to the "GamePanelX-V3-master/ajax/ajax.php" API endpoint. This allows an attacker to execute...

FATEK Automation PLC Ethernet Module

CVSS v3 7.3 ATTENTION: Remotely exploitable. Low skill level to exploit. Vendor: FATEK Automation Equipment: PLC Ethernet Module Vulnerability: Stack-based buffer overflow AFFECTED PRODUCTS The affected Ethercfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to...

OpenText Documentum D2 4.x Remote Code Execution

CVE Identifier: CVE-2017-5586 Vendor: OpenText Affected products: Documentum D2 version 4.x Researcher: Andrey B. Panfilov Severity Rating: CVSS v3 Base Score: 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Description: Document D2 contains vulnerable BeanShell bsh and Apache Commons libraries and...

CVE-2016-5798

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

ICSA-17-045-03 Siemens SIMATIC Authentication Bypass (Update D)

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Vulnerability: Improper Authentication 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-17-045-03C Siemens SIMATIC...

Belden Hirschmann GECKO

CVSS v3 5.9 ATTENTION: Remotely Exploitable/high skill level to exploit. Vendor: Belden Equipment: Hirschmann GECKO Vulnerability: Authentication Bypass Using an Alternate Path or Channel AFFECTED PRODUCTS The following GECKO switch versions are affected: Hirschmann GECKO Lite Managed switch,...

Pirelli DRG A115 V3 ADSL Router Unauthenticated Remote DNS Change

!/bin/bash Pirelli DRG A115 v3 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

Schneider Electric homeLYnk Controller

CVSS V3 6.3 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Schneider Electric Equipment: homeLYnk Controller, LSS100100 Vulnerability: Cross-site Scripting AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following products: homeLYnk Controller,...

Pirelli DRG A115 v3 ADSL Router - DNS Change

Pirelli DRG A115 v3 ADSL Router - DNS Change !/bin/bash Pirelli DRG A115 v3 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which...

Pirelli DRG A115 v3 ADSL Router - DNS Change

!/bin/bash Pirelli DRG A115 v3 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

PHOENIX CONTACT mGuard

CVSS V3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerability: Software update changes password to default AFFECTED PRODUCTS PHOENIX CONTACT reports that the vulnerability affects the following mGuard products: Only devices that hav...

V3 CONNECT - Dangerous filesystem permissions, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application V3 CONNECT published at the 'play' market has multiple vulnerabilities...

Rockwell Automation MicroLogix 1100 PLC Overflow Vulnerability

OVERVIEW David Atch of CyberX has identified a stack-based buffer overflow vulnerability in Rockwell Automation’s Allen-Bradley MicroLogix 1100 programmable logic controller PLC systems. Rockwell Automation has produced a new firmware version to mitigate this vulnerability. This vulnerability cou...

CVE-2016-6900

The Intelligent Baseboard Management Controller iBMC in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; a...

CVE-2016-6899

The Intelligent Baseboard Management Controller iBMC in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers with software before V100R003C00SPC515, RH5885 V3 servers with software before V100R003C10SPC102, a...

CVE-2016-6899

The CVE-2016-6899 issue affects Huawei iBMC in RH1288 V3, RH2288 V3, RH2288H V3, RH5885 V3, and XH620/XH622/XH628 V3 servers running software before the specified V100R00xC00SPx levels. The root cause is the ability to select an insecure SSL encryption algorithm in the iBMC, which could permit re...

CVE-2016-6900

CVE-2016-6900 affects Huawei iBMC in RH1288 V3, RH2288 V3, RH2288H V3, RH5885 V3, and XH620/622/628 V3 servers with software before the specified SPC updates. Local users can cause iBMC resource exhaustion and DoS via unspecified vectors. Huawei’s advisory HWPSIRT-2016-05251 notes these resource-...

CVE-2016-6825

The CVE covers Huawei server families (XH620/V3, XH622/V3, XH628/V3 before specific SPC builds; RH1288V3 before SPC613; RH2288V3 before SPC617; RH2288H V3 before SPC515) where lack of authentication protection enables brute-force password retrieval via remote access. This reflects a remote-authen...

CVE-2016-6900: Undefined Security Weakness

The Intelligent Baseboard Management Controller iBMC in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; a...

PT-2016-7123

Name of the Vulnerable Software and Affected Versions Huawei XH620 V3 versions prior to V100R003C00SPC610 Huawei XH622 V3 versions prior to V100R003C00SPC610 Huawei XH628 V3 versions prior to V100R003C00SPC610 Huawei RH1288 V3 versions prior to V100R003C00SPC613 Huawei RH2288 V3 versions prior to...