PT-2016-5660

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.5 Description The issue allows remote administrators to execute arbitrary SQL commands. This is achieved via the "c0-e3" parameter to the "/dwr/call/plaincall/UserAjax.getUsersList.dwr" API endpoint, specifically by...

Elipse E3 Process Control Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-069-04 Elipse E3 Process Control Vulnerability that was published March 10, 2015, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3...

Elipse E3 Process Control Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3 application. The process control vulnerability is a result of a third-party DLL, developed by Telerik, which is used in the Elipse E3 application. Elipse has released a new version that...

CVE-2015-6375

The debug-logging aka debug cns feature in Cisco Networking Services CNS for IOS 15.22E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010...

CVE-2015-6375

The debug-logging aka debug cns feature in Cisco Networking Services CNS for IOS 15.22E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010...

CVE-2015-6375: Exposure of Sensitive Information to an Unauthorized Actor

The debug-logging aka debug cns feature in Cisco Networking Services CNS for IOS 15.22E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010...

CVE-2015-0978

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

CVE-2015-0978

CVE-2015-0978 affects Elipse E3 up to 4.6.161 and the Telerik EQATEC Analytics Monitor DLLs (Win32 vc100.dll and Win32 vc100-x64.dll). The vulnerability arises from untrusted DLL loading (OpenSSL-related) that can allow a local attacker to execute arbitrary code by convincing a user to load a mal...

CVE-2015-0978

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

PT-2015-5000

Name of the Vulnerable Software and Affected Versions Elipse E3 versions 4.5.232 through 4.6.161 Description The issue allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, due to multiple untrusted search path vulnerabilities in EQATEC.Analytics.Monitor.Win32...

CVE-2015-0978: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

Elipse E3 Process Control Vulnerability

Elipse E3 is the monitoring control and data acquisition system. A process control vulnerability in the Elipse E3 application caused by a third-party DLL can be successfully exploited to cause arbitrary code execution...

Elipse E3 HTTP Denial of Service Exploit

Exploit for windows platform in category dos / poc // Exploit Http DoS Request for SCADA ATTACK Elipse 3 // Mauro Risonho de Paula Assumpção aka firebits // email protected // 29-10-2013 11:42 // Vendor Homepage: http://www.elipse.com.br/port/index.aspx // Software Link:...

Elipse E3 - HTTP Denial of Service

Elipse E3 - HTTP Denial of Service // Exploit Http DoS Request for SCADA ATTACK Elipse 3 // Mauro Risonho de Paula Assumpção aka firebits // [email protected] // 29-10-2013 11:42 // Vendor Homepage: http://www.elipse.com.br/port/index.aspx // Software Link:...

CVE-2014-8652

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

Code injection

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

CVE-2014-8652

Elipse E3 3.x and earlier is affected by CVE-2014-8652. The issue allows remote attackers to cause a denial of service (application crash and plant outage) by sending a rapid series of HTTP requests to index.html on TCP port 1681. The Exploit/Malware entries corroborate a Windows-based PoC/DoS te...

CVE-2014-8652

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

PT-2014-8658

Name of the Vulnerable Software and Affected Versions Elipse E3 versions 3.x and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an application crash and potentially a plant outage. This can be achieved by sending a rapid series of HTTP requests to...