PT-2021-20564 · 3S Smart Software Solutions · Codesys V2

Name of the Vulnerable Software and Affected Versions: CODESYS V2 versions prior to 1.1.9.22 Description: The issue is caused by crafted web server requests that may lead to a heap-based buffer overflow, potentially triggering a denial-of-service condition due to a crash in the web server...

CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 web server versions prior to 1.1.9.22. The vulnerability stems from a crafted web server request that may result in a heap-based buffer overflow, which may trigger a...

CVE-2021-34586

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition...

CVE-2021-34583

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22...

CVE-2021-34585

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation...

CVE-2021-34584

Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22...

Peleton TTR01 安全漏洞

The Peleton TTR01 is a wireless device. A security vulnerability exists in the Peleton TTR01 including the PTV55G that allows remote attackers to exploit a heap overflow in the web server that handles Apple's GymKit communications to trigger a denial of service attack via the GymKit daemon. This...

Hikvision Web Server Build 210702 - Command Injection

Exploit Title: Hikvision Web Server Build 210702 - Command Injection Exploit Author: bashis Vendor Homepage: https://www.hikvision.com/ Version: 1.0 CVE: CVE-2021-36260 Reference: https://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html All credit to WatchfulIP...

CVE-2021-38465

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable...

Design/Logic Flaw

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable...

CVE-2021-38465 AUVESY Versiondog

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable...

CVE-2021-38465

The CVE-2021-38465 issue affects Auvesy Versiondog’s webinstaller (a Golang web server used to generate an Auvesy image agent). The root cause is uncontrolled resource consumption: generating many installations can cause unlimited, temp-folder storage growth, enabling denial of service through re...

CVE-2021-35666

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: OSSL Module. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful...

Red Hat JBoss Application Server 安全漏洞

Red Hat JBoss Application Server is a U.S. Red Hat Red Hat company based on Java EE open source application server. The product features ultra-fast startup, lightweight, modular design, hot and parallel deployment, concise management, domain management, and first class components. A security...

Oracle HTTP Server 输入验证错误漏洞

Oracle HTTP Server is a web server component of Oracle Fusion Middleware. an unauthorized access vulnerability exists in the Web Listener component of Oracle HTTP Server version 11.1.1.9.0. A successful attack could result in unauthorized update, insert, or delete access to certain Oracle HTTP...

CVE-2021-31380: Exposure of Sensitive Information to an Unauthorized Actor

A configuration weakness in the JBoss Application Server AppSvr component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive...

Red Hat JBoss Application Server 安全漏洞

Red Hat JBoss Application Server is a U.S. Red Hat Red Hat company based on Java EE open source application server. The product features ultra-fast startup, lightweight, modular design, hot and parallel deployment, concise management, domain management, and first class components. A security...

USN-5109-1: nginx vulnerability

It was discovered that nginx incorrectly handled files with certain modification dates. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact...

[SECURITY] Fedora 33 Update: httpd-2.4.51-1.fc33

The Apache HTTP Server is a powerful, efficient, and extensible web server...

GoAhead file upload vulnerability

GoAhead is an open source small embedded web server from Embedthis Software, U.S. GoAhead is vulnerable to a file upload vulnerability that stems from incomplete filter processing in the file upload filter. An attacker could exploit this vulnerability to import untrusted environment variables int...