The vulnerability of the CODESYS industrial automation software system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS software suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to trigger a service failure.

The vulnerability of the CODESYS V2.3 web server component of the industrial automation software suite arises due to an overflow in the buffer on the stack. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite is related to security configuration errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to disclose protected information and cause service interruptions.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system exists due to the reading of data beyond the specified buffer limits. Exploiting this vulnerability can allow a malicious actor to disclose protected information and cause service...

CODESYS V2 web server

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS V2 web server Vulnerabilities: Stack-based Buffer Overflow, Improper Access Control, Buffer Copy without Checking Size of Input, Improperly Implemented Security Check,...

USN-4994-1 apache2 vulnerabilities

Marc Stern discovered that the Apache modproxyhttp module incorrectly handled certain requests. A remote attacker could possibly use this issue to cause Apache to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. CVE-2020-13950...

SUSE SLED12 / SLES12 Security Update : gupnp (SUSE-SU-2021:2080-1)

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2080-1 advisory. - CVE-2021-33516: Fixed a DNS rebinding, which could trick the browser into triggering actions against local UPnP services bsc1186590. Tenable...

Denial of service

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

Denial of service

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

CVE-2021-33820

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

Exploit for Deserialization of Untrusted Data in Apache Log4J

This is a PoC exploit for CVE-2019-17571, an RCE vulnerability in the Java JNDI API. The repository is a malicious LDAP server for JNDI injection attacks, containing LDAP and HTTP servers for exploiting insecure-by-default Java JNDI API. The tool brings new attack vectors by leveraging the power ...

Trojan.Win32.Alien.erf Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/57ab194d8c60ee97914eda22e4d71b68B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Alien.erf Vulnerability: Remote Stack Buffer Overflow Description: The malware deploys...

GHSA-QM58-CVVM-C5QR elFinder unsafe upload filtering leading to remote code execution

Impact Before elFinder 2.1.58, the upload filter did not disallow the upload of .phar files. As several Linux distributions are now shipping Apache configured in a way it will process these files as PHP scripts, attackers could gain arbitrary code execution on the server hosting the PHP connector...

Command Execution Vulnerability in deituiCMS

deituiCMS is a set of open source free website building CMS. A command execution vulnerability exists in deituiCMS, which can be exploited by an attacker to gain control of a web server...

Oracle Linux 7 : gupnp (ELSA-2021-2417)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2417 advisory. 1.0.2-6 + gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: 1964706 Tenable has extracted the preceding description block directly from the Oracle Linux security...

gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local UPnP services

A flaw was found in gupnp. DNS rebinding can occur when a victim's browser is used by a remote web server to trigger actions against local UPnP services including data exfiltration, data tempering, and other exploits. The highest threat from this vulnerability is to data confidentiality and...

CVE-2021-22749

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially...

CVE-2021-22749

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially...

CVE-2021-22749

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially...