356 matches found
CVE-2016-2288
CVE-2016-2288 affects Cogent DataHub versions up to 7.3.9 (and earlier). The vulnerability arises from improper privilege management, allowing a local user/guest to elevate privileges by modifying an accessible file. The advisory/ATA cites that Cogent fixed this in 7.3.10; upgrading to 7.3.10 (or...
CVE-2016-2288
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file...
Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation
Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation / Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryServiceConfig SUCCESS SERVICENAME...
Cogent Datahub 7.3.9 Gamma Script - Elevation of Privilege
Exploit for windows platform in category local exploits / Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryS...
Cogent Datahub 7.3.9 Privilege Escalation
/ Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryServiceConfig SUCCESS S...
Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation
/ Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryServiceConfig SUCCESS SERVICENAME: Cogent DataHub TYPE : 110 WIN32OWNPR...
Cogent Real-Time Systems Cogent DataHub Privilege Vulnerability
Cogent Real-Time Systems Cogent DataHub is a suite of real-time data solutions from Cogent Real-Time Systems, a Canadian company, which is part of the SCADA System for Data Acquisition and Supervisory Control and Automation software. A boost vulnerability exists in Cogent Real-Time Systems Cogent...
Cogent DataHub Gamma Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cogent DataHub. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EvalExpresssion method, which is available remotely through the AJAX facility. Usin...
Cogent DataHub Code Injection Vulnerability
OVERVIEW NCCIC/ICS-CERT has become aware of a code injection vulnerability affecting the Cogent DataHub application produced by Cogent Real-Time Systems, Inc. An anonymous security researcher reported this vulnerability to HP’s Zero Day Initiative ZDI. A patch to mitigate this issue was released ...
Cogent DataHub <= 7.1.1.63 Stack Overflow
No description provided by source. Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: stack unicode overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web...
Cogent Datahub <= 7.1.1.63 - Remote Unicode Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Cogent Datahub = v7.1.1.63 Remote Unicode Buffer Overflow Exploit tested on: - windows server 2003 - windows XP sp3 questions @netninja || @luigiauriemma example usage: mrme@neptune cognet$ ./cognetoverflow.py 192.168.114.130...
Cogent DataHub HTTP Server Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Cogent DataHub <= 7.1.1.63 Source Disclosure
No description provided by source. Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: source disclosure Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web:...
Cogent DataHub Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Exploitation is reliable, but the service hangs and needs manual restarting...
Cogent DataHub <= 7.1.1.63 Integer Overflow
No description provided by source. Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: integer overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web:...
Cogent DataHub Command Injection Exploit
Exploit for windows platform in category remote exploits This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Cogent DataHub Command Injection', 'Description' = %q This module exploits a...
Cogent DataHub Web Server GetPermissions.asp Command Injection (CVE-2014-3789)
A remote command injection vulnerability has been reported in Cogent DataHub. The vulnerability is due to insufficient validation within the GetPermissions.asp page. A remote attacker can exploit this vulnerability by submitting a maliciously crafted request to GetPermissions.asp. This can result...
Cogent DataHub - Command Injection (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Cogent DataHub Command Injection', 'Description' = %q This module exploits an injection vulnerability in Cogent DataHub prior to 7.3....
Cogent DataHub < 7.3.5 Multiple Vulnerabilities
Binary data scadacogentdatahub735.nbin...
CVE-2014-2352
The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a limited number of hardcoded file types. Further exploitation of this vulnerability may allow an attacker to cause the web server...