Phoenix Contact Automation Worx Software Suite Uninitialized Pointer Access Vulnerability

Automation Worx Software Suite is an automation software package from Phoenix Contact. An uninitialized pointer access vulnerability exists in the PC Worx, PC Worx Express, and Config+ components in Phoenix Contact Automation Worx Software Suite versions 1.86 and earlier. An attacker could exploi...

Phoenix Contact Automation Worx Software Suite Memory Misreference Vulnerability

Automation Worx Software Suite is an automation software package from Phoenix Contact. A memory misreference vulnerability exists in the PC Worx, PC Worx Express, and Config+ components in Phoenix Contact Automation Worx Software Suite versions 1.86 and earlier. An attacker could exploit this...

Phoenix Contact Automation Worx Software Suite Out-of-Bounds Read Vulnerability

Automation Worx Software Suite is an automation software package from Phoenix Contact. An out-of-bounds read vulnerability exists in the PC Worx, PC Worx Express, and Config+ components in Phoenix Contact Automation Worx Software Suite versions 1.86 and earlier. An attacker could exploit this...

PHOENIX CONTACT Automation Worx Software Suite

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Phoenix Contact Equipment: Automation Worx Software Suite Vulnerabilities: Access of Uninitialized Pointer, Out-of-bounds Read, Use After Free 2. RISK EVALUATION Successful exploitation of these...

Unable to access Worx Store and getting errors "could not load store"

On iOS Device while accessing store "cannot complete your request" error message. On Android while accessing store getting error message while accessing store "could not load store" SecureHub Logs "2017-02-02T16:09:51.998+0400","SecureHub","ERROR...

Citrix Worx Home and Citrix XenMobile MDX Toolkit Security Bypass Vulnerability

Citrix Worx Home and Citrix XenMobile MDX Toolkit are both products of Citrix Systems USA. The former is a suite of software used to help users access data or work-related applications, and the latter is a toolkit that can encapsulate mobile applications on iOS or Android with Citrix logic and...

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

Authentication flaw

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

CVE-2016-5109

Summary of the vulnerability (CVE-2016-5109) : Citrix Worx Home for iOS and XenMobile MDX Toolkit for iOS are affected. Versions affected: XenMobile MDX Toolkit for iOS 10.3.0.x–10.3.5.x and Worx Home 10.3.x for iOS 10.3.0.x–10.3.5.x. Root cause / impact : An attacker with physical access could b...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

Mitsubishi MCWorkX ActiveX Control File Execution Command Execution - Ver2 (CVE-2013-2817)

A command execution vulnerability has been reported in Mitsubishielectric Mc-worx Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Mitsubishi Electric Automation MC-WorX Suite Unsecure ActiveX Control

OVERVIEW This advisory is a follow-up to the original alert, titled ICS-ALERT-13-259-01 Mitsubishi MC-WorX Suite Unsecure ActiveX Control,ICS-ALERT-13-259-01 Mitsubishi MC-WorkX Suite Insecure ActiveX Control, http://ics-cert.us-cert.gov/alerts/ICS-ALERT-13-259-01, web site last accessed February...

Joomla Component com_liveticker SQL Injection (CVE-2008-6148)

An SQL injection vulnerability has been reported in Raven-worx Liveticker. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Mitsubishi Electric Automation MC-WorX 8.x ActiveX Control Remote Code Execution

Binary data scadamitsubishimc-worx8activex.nbin...

Mitsubishi Electric Automation MC-WorX Suite Detection

Binary data scadaappmitsubishimc-worxdetect.nbin...

CVE-2013-2817

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...

Hardcoded credentials

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...

CVE-2013-2817

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...

CVE-2013-2817

The vulnerability CVE-2013-2817 affects Mitsubishi Electric Automation MC-WorX Suite 8.02 via the IcoLaunch.dll ActiveX control. The insecure control (Exposed Dangerous Method or Function CWE-749) can be used to execute arbitrary code when a user visits a crafted HTML document and clicks the Logi...