2704 matches found
EUVD-2014-0797
Malware in sbrugna...
EUVD-2015-3978
Malware in sbrugna...
EUVD-2019-5013
Malware in sbrugna...
EUVD-2023-36871
Malicious code in bioql PyPI...
EUVD-2023-26612
Malicious code in bioql PyPI...
EUVD-2021-29666
Malicious code in bioql PyPI...
EUVD-2023-23687
Malicious code in bioql PyPI...
EUVD-2021-9810
Malicious code in bioql PyPI...
EUVD-2021-9805
Malicious code in bioql PyPI...
EUVD-2024-27402
Malicious code in bioql PyPI...
EUVD-2023-36784
Malicious code in bioql PyPI...
EUVD-2023-34314
Malicious code in bioql PyPI...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess
This is a proof-of-concept PoC exploit for a vulnerability in the bwconn.dll library, which is a Windows RPC Remote Procedure Call client. The vulnerability is identified as CVE-2016-0856. The PoC exploit is written in Python and uses the ctypes library to interact with the bwconn.dll library. Th...
CVE-2023-2866
If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server...
CVE-2023-1437
All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute...
CVE-2021-38408
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution...
CVE-2021-27436
WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malicious JavaScript code to an unsuspecting user, which could result in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage and performing...
CVE-2021-33004
The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer versions 2.1.9.95 and prior...