Rockwell Automation/Allen-Bradley PanelView 5510 2715P-T19CD-B 19-in. Touch with Keypad HMI Terminal

Binary data 765041.prm...

Yokogawa Vnet/IP Open Communication Driver Denial-of-Service (ICSA-19-003-02)

Binary data 720286.prm...

Webmin 1.920 - Remote Code Execution

!/bin/sh CVE-2019-15107 Webmin Unauhenticated Remote Command Execution based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html Alternative advisory spanish:...

Webmin 1.920 - Remote Code Execution

Webmin 1.920 - Remote Code Execution !/bin/sh CVE-2019-15107 Webmin Unauhenticated Remote Command Execution based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...

ZZCMS website building system investment module b_zs parameter SQL injection vulnerability

ZZCMS with product investment type template, you can quickly build product investment website. ZZCMS website building system investment module bzs parameter SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

Rockwell Automation Arena Simulation Software (Update B)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Low skill level to exploit Vendor: Rockwell Automation Equipment: Arena Simulation Software --------- Begin Update B Part 1 of 2 --------- Vulnerabilities: Use After Free, Information Exposure, Type Confusion, Insufficient UI Warning of Dangerous...

b-locked.be Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-882928 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting b-locked.be website and its...

The vulnerability of the command-line interface of Cisco UCS Blade Series B software allows a hacker to write arbitrary files.

The vulnerability of the command-line interface of Cisco UCS Blade series B micro-programming system software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to write arbitrary files by modifying the command-line interface parameters...

Trint Ltd: IDOR to update folder name of other user

Summary There is an IDOR to update folder name of other user Steps To Reproduce: - user A login to the application and see the folder name F494331 - user B login to the application and call the API with the projectId of user A POST / HTTP/1.1 Host: graphql2.trint.com User-Agent: Mozilla/5.0 Windo...

Rockwell Automation/Allen-Bradley PanelView 5500 15 Touch Version B HMI Terminal

Binary data 751090.prm...

Rockwell Automation/Allen-Bradley PanelView 5500 9 Touch Version B HMI Terminal

Binary data 751086.prm...

Rockwell Automation/Allen-Bradley PanelView 5500 19 Touch Version B HMI Terminal

Binary data 751092.prm...

Rockwell Automation/Allen-Bradley PanelView 5500 15 Keypad Version B HMI Terminal

Binary data 751091.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1400 1766-L32xxx Series A < 7.000 / Series B <= 11.000 HTTP Remote DoS

Binary data 77.prm...

Rockwell Automation/Allen-Bradley PanelView 5500 10 Keypad Version B HMI Terminal

Binary data 751088.prm...

Rockwell Automation/Allen-Bradley PanelView 5500 7 Keypad Version B HMI Terminal

Binary data 751085.prm...

Rockwell Automation/Allen-Bradley PanelView 5500 12 Touch Version B HMI Terminal

Binary data 751089.prm...

Rockwell Automation/Allen-Bradley PanelView 5500 7 Touch Version B HMI Terminal

Binary data 751084.prm...

CVE-2018-19988

In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-868L Rev.B 2.05B02 devices. In the SetClientInfoDemo.php source code, the AudioMute and AudioEnble parameters are saved in the ShellPath script file without...

CVE-2018-19989

In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php source code, the uplink parameter is saved in the /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth...