rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data vulnerability in owner command that can result in code...

ABB 1SAP576200R0001 CP676-WEB Control Panel Detection

Binary data 756377.prm...

Beckhoff C3340-0050 Industrial Computer Detection

Binary data 763408.prm...

Beckhoff CX8031 Industrial Computer Detection

Binary data 763514.prm...

Omron NX-CSG320 Communications Adapter Detection

Binary data 756206.prm...

Omron CP1L-M60DR-A PLC Detection

Binary data 755937.prm...

Rockwell Automation Micrologix 1400 <= 21.2 User Fault Routine Exploit

Binary data 720222.prm...

Yokogawa ANT512 Relay Module Detection

Binary data 759510.prm...

Siemens CPU 412-1 MPI/DP PLC Detection

Binary data 756572.prm...

Rockwell Automation Micrologix 1400 <= 21.2 Master Password Request Exploit

Binary data 720225.prm...

Mitsubishi FX5-16ET/ESS-H Digital I/O Module Detection

Binary data 751969.prm...

Rockwell Automation 1756-MVI/A Communications Adapter

Binary data 752917.prm...

Omron CJ1W-OD231 Digital IO Module Detection

Binary data 756057.prm...

Beckhoff CP6242-0001-0070 Industrial Computer Detection

Binary data 762747.prm...

Teeworlds Integer Overflow Vulnerability

Teeworlds is a free online multiplayer game. An integer overflow vulnerability exists in CDataFileReader::Open in engine/shared/datafile.cpp in Teeworlds 0.7.2, which arises from a networked system or product that does not properly compute or convert the resulting numbers, and can be exploited by...

GNU PSPP Denial of Service Vulnerability

GNU PSPP is the program used for statistical analysis of sampling data. A security vulnerability exists in the writelongstringmissingvalues function in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0. An attacker could exploit this vulnerability to cause a denial of service...

Schneider Electric Eurotherm by Schneider Electric GUIcon Type Obfuscation Vulnerability

Schneider Electric Eurotherm by Schneider Electric GUIcon is a suite of graphical user interface programming software from Schneider Electric, France. A type confusion vulnerability exists in Schneider Electric Eurotherm by Schneider Electric GUIcon. An attacker could use this vulnerability to...

CVE-2018-19127

A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cachetemplate/.tpl.php file...

CVE-2018-1000546

Triplea version = 1.9.0.0.10291 contains a XML External Entity XXE vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file XML...

CVE-2018-1000546

Triplea version = 1.9.0.0.10291 contains a XML External Entity XXE vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file XML...