CVE-2023-4685 CVE-2023-4685

Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code...

CVE-2023-4685 CVE-2023-4685

Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code...

CVE-2023-4685

CVE-2023-4685 affects Delta Electronics CNCSoft-B and DOPSoft: stack-based buffer overflow in the parsing of DPA files, impacting CNCSoft-B 1.0.0.4 and DOPSoft prior to 4.0.0.82. Evidence from ZDI describes remote code execution with user interaction (via malicious page/file), while ICS-related s...

PT-2023-4982 · Delta Electronics · Dopsoft +1

Name of the Vulnerable Software and Affected Versions: CNCSoft-B version 1.0.0.4 DOPSoft versions 4.0.0.82 and prior Description: The issue is caused by a stack-based buffer overflow in Delta Electronics' CNCSoft-B and DOPSoft, which could allow an attacker to execute arbitrary code. This overflo...

HPESBST04532 rev.1 - HPE B-Series SANnav Management Portal and Global View, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Authentication Bypass, Code Execution, Denial of Service DoS, Disclosure of Information, Escalation of Privilege, Multiple Vulnerabilities, Unauthorized Data Modification, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted...

CVE-2023-39454

Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code...

Buffer overflow

Buffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and earlier, and WRC-X1800GSH-B v1.13 and earlier allows an unauthenticated attacker to execute arbitrary code...

CVE-2023-39454

CVE-2023-39454 is a buffer-overflow vulnerability in ELECOM wireless LAN routers of the WRC-X1800GS-B, WRC-X1800GSA-B, and WRC-X1800GSH-B families (1.13 or earlier). The flaw allows an unauthenticated attacker to execute arbitrary code. Public details in connected documents specify firmware updat...

CVE-2023-39454

Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code...

PT-2023-26956 · Elecom · Elecom Wrc-X1800Gsa-B

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-X1800GS-B versions 1.13 and earlier ELECOM WRC-X1800GSA-B versions 1.13 and earlier ELECOM WRC-X1800GSH-B versions 1.13 and earlier Description: A buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow...

PT-2023-26784 · Rconfig · Rconfig

Name of the Vulnerable Software and Affected Versions: rconfig version 3.9.4 Description: The issue allows authenticated attackers to make arbitrary requests via injection of crafted URLs, exploiting a Server-Side Request Forgery SSRF vulnerability. This is achieved through the path b parameter i...

CVE-2023-35861

A shell-injection vulnerability in email notifications on Supermicro motherboards such as H12DST-B before 03.10.35 allows remote attackers to inject execute arbitrary commands as root on the BMC...

Supermicro motherboards 操作系统命令注入漏洞

Supermicro motherboards are a line of server motherboards from Supermicro Computer USA. A security vulnerability exists in Supermicro motherboards version H12DST-B prior to 03.10.35, which stems from the presence of a shell injection vulnerability. The vulnerability can be exploited by an attacke...

B-OBEC V.092019 SQL Injection

==================================================================================================================================== | Title : B-OBEC V.092019 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | |...

CVE-2023-3242

Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions...

Design/Logic Flaw

Allocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B&R Industrial Automation B&R Automation Runtime allows Flooding, Leveraging Race Conditions.This issue affects B&R Automation Runtime: G4.93...

CVE-2023-3242

Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions...

CVE-2023-3242

The CVE-2023-3242 issue concerns B&R Automation Runtime’s Portmapper. Affected product: B&R Industrial Automation Automation Runtime (prior to G4.93). Vulnerable component: Portmapper service with improper initialization. Impact: unauthenticated network-based attackers can cause permanent denial-...

WordPress Nugget by Ingot: Easy, automated and native A/B testing for everyone Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Nugget by Ingot: Easy, automated and native A/B testing for everyone Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

WordPress B Blocks - The ultimate block collection Plugin < 1.7.8 is vulnerable to Cross Site Scripting (XSS)

Software B Blocks - The ultimate block collection Type Plugin Vulnerable versions 1.7.8 Fixed in 1.7.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a29938020aa Credits Rafie...