CVE-2022-1794 Plaintext Storage of a password in CODESYS V3 OPC DA Server

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

CVE-2022-1794

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

Malicious code in da-wix-dealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfcb11815b9b0e253aafec13c58cac7ac7795ae8c0afa88ca0408bf0471a6cb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2312 Malicious code in da-wix-dealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfcb11815b9b0e253aafec13c58cac7ac7795ae8c0afa88ca0408bf0471a6cb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2311 Malicious code in da-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b410a963bb86c3b41b0e57ec5e3241449aabd5dd24c8258d724d97cd41a6b02f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in da-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b410a963bb86c3b41b0e57ec5e3241449aabd5dd24c8258d724d97cd41a6b02f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: mythes-da

An update is available for mythes-da. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

new packages: hyphen-da

An update is available for hyphen-da. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

new packages: hunspell-da

An update is available for hunspell-da. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

ati.da.gov.ph Improper Access Control vulnerability OBB-2423213

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

da-jew.ru Cross Site Scripting vulnerability OBB-2361822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SMBSR - Lookup For Interesting Stuff In SMB Shares

Well, SMBSR is a python script which given a CIDR/IP/IPfile/HOSTNAMEs enumerates all the SMB services listening 445 among the targets and tries to authenticate against them; if the authentication succeed then all the folders and subfolders are visited recursively in order to find secrets in files...

da-gaetano.de Cross Site Scripting vulnerability OBB-2309993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2017-20007

Ingeteam INGEPAC DA AU AUC1.13.0.28 and before web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this...

Design/Logic Flaw

Ingeteam INGEPAC DA AU AUC1.13.0.28 and before web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this...

XSS Vulnerability in Cyberdocuments (CNVD-2021-45738)

Ltd. formerly known as Anhui Zhongke Daxunfei Information Technology Co., Ltd, the company is headquartered in Hefei, was founded on December 30, 1999, and was changed to KD Xunfei Co., Ltd. on April 18, 2014, which specializes in intelligent voice and language technology research, software and...

Information Leakage Vulnerability in VNet Web Management System of Zhonghai Da

Guangzhou Zhonghaida Satellite Navigation Technology Co., Ltd stock code: 300177 is the first and so far the only listed company in the field of domestic surveying, mapping and geographic information technology equipment. An information leakage vulnerability exists in ZHIDA's VNet web management...

Ta-da Accelerator Denial of Service Vulnerability

Ta da Accelerator is a game gas pedal software. A denial of service vulnerability exists in DaDa Accelerator version 5.6.19.816. An attacker could exploit the vulnerability through a specially crafted program to cause a computer crash...

ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI Interface Vulnerability: Numeric Errors 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker-controlled OPC XML-DA Server to respond with a...

da-max.de Cross Site Scripting vulnerability OBB-1326427

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...