HelpU agent input validation vulnerability

HelpU agent is a software from HelpU Korea that uses remote control technology to solve problems by allowing direct viewing of a customer's computer screen. It makes customer support easier and better. A security vulnerability exists in HelpU agent that originated from a vulnerability that could ...

Beckhoff TwinCAT Security Vulnerability

Beckhoff TwinCAT is a PC-based motion control software for industrial control applications from Beckhoff Germany. The software is based on Windows-based control and automation technology and converts any PC-based system into a real-time control system with multiple PLCs, NCs, CNCs and robotics...

Moxa MXView Privilege Escalation

The vulnerability of the Moxa MXView network control software is related to incorrect default access rights settings. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands with privileges of a system user...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2 (CNVD-2020-49073)

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Denial of Service Vulnerability in Proficy Machine Edition (CNVD-2020-32607)

Proficy Machine Edition is a PLC programming software developed by Emerson Trading Shanghai Co., Ltd. for designing, debugging, programming, and maintaining GE RX 3i and GE RX7i series PLCs, which is widely used in industrial control fields such as electric power, machinery manufacturing, steel,...

Arbitrary File Deletion Vulnerability in Advantech WebAccessNode

Advantech WebAccessNode is a fully Internet Explorer based HMI/SCADA monitoring software. Advantech WebAccessNode suffers from an arbitrary file deletion vulnerability, which can be exploited by an attacker to delete files at any path within the system...

CVE-2020-5275: All rules set in "access_control" are required when the firewall is configured with the unanimous strategy

More info at https://symfony.com/cve-2020-5275...

TeamViewer Buffer Overflow DoS

The vulnerability of TeamViewer’s software for remote control is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Anviz CrossChex access control management software buffer overflow vulnerability

Anviz CrossChex access control management software is an intelligent management system for Anviz access control and time & attendance devices from Anviz China. A buffer overflow vulnerability exists in the Anviz CrossChex access control management software. The vulnerability arises when a network...

CVE-2019-12518

Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability...

CVE-2019-3955

Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the server not properly validating RsaPubKeyLen during key negotiation. An unauthenticated remote attacker can cause a heap buffer overflow by specifying a large RsaPubKeyLen, which cou...

RemoteMouse 3.008 - Arbitrary Remote Command Execution

RemoteMouse 3.008 - Arbitrary Remote Command Execution Exploit Title: Remote Mouse 3.008 - Failure to Authenticate Date: 2019-09-04 Exploit Author: 0rphon Software Link: https://www.remotemouse.net/ Version: 3.008 Tested on: Windows 10 Remote Mouse 3.008 fails to check for authenication and will...

pcwin.dll Data Type Mismatch RCE

The vulnerability of the pcwin.dll library in the GUI temperature control software is related to a data type mismatch error. Exploiting this vulnerability could allow an attacker to execute arbitrary code during the syntactic analysis of the GD1 file...

Wi-Fi Konke Smart Plug Telnet Authentication Bypass Root Privilege

The vulnerability of the Wi-Fi Konke Smart Plug remote control software relates to the absence of authentication procedures for Telnet sessions. Exploiting this vulnerability could allow a malicious actor to control the device with root privileges through port 23...

Supervisor XML-RPC Authenticated Remote Code Execution Exploit

This Metasploit module exploits a vulnerability in the Supervisor process control software, where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell commands on the server. The commands will be run as the same user as supervisord. Depending o...

Delta Industrial Automation WPLSoft dvp File Buffer Overflow Vulnerability

Delta Industrial Automation is a global industrial automation manufacturer of power management and thermal solutions. WPLSoft and PMSoft are Delta's PLC programming software. A buffer overflow vulnerability exists in the Delta Industrial Automation WPLSoft dvp file due to a failure to validate th...

Advantech WebAccess nvA1Media Connect MediaUsername Stack Buffer Overflow Remote Code Execution Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow remote code execution vulnerabilit...

CVE-2017-1000043

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control...

NetScaler Gateway Command Execution

The vulnerability of the microprogramming software in the access control system for the NetScaler Gateway lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using uncertain vectors...

PT-2016-36: Privilege Escalation in McAfee Application Control

The specialists of the Positive Research center have detected a Privilege Escalation vulnerability in McAfee Application Control. Vulnerability in McAfee Application Control allows attackers elevate privileges, cause a denial of service, or potentially execute arbitrary code via unauthorized use ...