CVE-2017-16745

A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type 'type confusion' vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files...

CVE-2017-16749

A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...

CVE-2017-16751

A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dpb files may allow an attacker to remotely execute arbitrary code...

CVE-2017-16749

Delta Electronics Delta Industrial Automation Screen Editor (v2.00.23.00 or earlier) contains a Use-after-Free in the DPB project file parser (CDocument path). Exploitation requires user interaction and is locally scoped (AV:L, UI:R). Successful exploitation could allow arbitrary code execution. ...

CVE-2017-16751

CVE-2017-16751 affects Delta Electronics’ Delta Industrial Automation Screen Editor (version 2.00.23.00 or prior). The vulnerability is a stack-based buffer overflow triggered while parsing .dpb project files , which could allow an attacker to execute arbitrary code. Multiple connected sources co...

CVE-2018-5476

CVE-2018-5476 affects Delta Electronics Delta Industrial Automation DOPSoft (versions ≤ 4.00.01). The issue is a stack-based buffer overflow triggered by processing specially crafted DOP/DPB/DPA files (and related macro structures), allowing remote code execution. Several advisories (ZDI-18-221, ...

Delta Electronics Delta Industrial Automation DOPSoft Heap Buffer Overflow Vulnerability

Delta Industrial Automation DOPSoft is a touch screen programming software from Delta Electronics. Delta Electronics Delta Industrial Automation DOPSoft handles a heap buffer overflow vulnerability in specially crafted .dop or .dpb files, which can be exploited by an attacker to execute arbitrary...

Delta Electronics Delta Industrial Automation DOPSoft

CVSS v3 6.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Delta Electronics Equipment: Delta Industrial Automation DOPSoft Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following version of Delta Industrial Automation DOPSoft, a human machine interface HMI...

Delta Electronics WPLSoft Stack Buffer Overflow Vulnerability

WPLSoft Delta PLC Programming Software is a PLC program programming software launched by Delta Electronics for use in the WINDOWS operating system environment. A stack buffer overflow vulnerability exists in Delta Electronics WPLSoft, where the application uses a fixed-length heap buffer, where a...

Delta Electronics WPLSoft Out-of-Bounds Write Vulnerability

WPLSoft Delta PLC Programming Software is a PLC program programming software launched by Delta Electronics for use in the WINDOWS operating system environment. An out-of-bounds write vulnerability exists in Delta Electronics WPLSoft, where the application writes data from a file outside the range...

Delta Electronics WPLSoft Heap Buffer Overflow Vulnerability

WPLSoft Delta PLC Programming Software is a PLC program programming software launched by Delta Electronics for use in the WINDOWS operating system environment. A heap buffer overflow vulnerability exists in Delta Electronics WPLSoft, where the application uses a fixed-length heap buffer, where a...

Delta Electronics WPLSoft

CVSS v3 8.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Delta Electronics Equipment: WPLSoft Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Out-of-bounds Write. AFFECTED PRODUCTS The following versions of WPLSoft, a PLC programming software, are...

research.investors.com XSS vulnerability

Open Bug Bounty ID: OBB-547966 Description| Value ---|--- Affected Website:| research.investors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

catalog.totalvideoproducts.com XSS vulnerability

Open Bug Bounty ID: OBB-537286 Description| Value ---|--- Affected Website:| catalog.totalvideoproducts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Delta Electronics Delta Industrial Automation Screen Editor

CVSS v3 5.5 ATTENTION: Low skill level to exploit. Vendor: Delta Electronics, Incorporated Delta Electronics Equipment: Delta Industrial Automation Screen Editor Vulnerabilities: Stack-based Buffer Overflow, Use-after-Free, Out-of-bounds Write, Type Confusion AFFECTED PRODUCTS The following...

Joomla Advertisement Board Classifieds 3.2.0 Shell Upload

Title: Advertisement board Joomla classifieds extension 3.2.0 - Remote Shell Upload Vulnerability Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: http://ordasoft.com/advertisement-board-joomla-classifieds-extension Product: 'Advertisement board Joomla classifieds extension 3.2.0'...

InfraPower PPS-02-S Q213V1 Hard-coded Credentials Remote Root Access

Summary InfraPower Manager PPS-02-S is a FREE built-in GUI of each IP dongle IPD-02-S only to remotely monitor the connected PDUs. Patented IP Dongle provides IP remote access to the PDUs by a true network IP address chain. Only 1xIP dongle allows access to max. 16 PDUs in daisy chain - which is ...

InfraPower PPS-02-S Q213V1 Local File Disclosure Vulnerability

Summary InfraPower Manager PPS-02-S is a FREE built-in GUI of each IP dongle IPD-02-S only to remotely monitor the connected PDUs. Patented IP Dongle provides IP remote access to the PDUs by a true network IP address chain. Only 1xIP dongle allows access to max. 16 PDUs in daisy chain - which is ...

InfraPower PPS-02-S Q213V1 Multiple XSS Vulnerabilities

Summary InfraPower Manager PPS-02-S is a FREE built-in GUI of each IP dongle IPD-02-S only to remotely monitor the connected PDUs. Patented IP Dongle provides IP remote access to the PDUs by a true network IP address chain. Only 1xIP dongle allows access to max. 16 PDUs in daisy chain - which is ...

InfraPower PPS-02-S Q213V1 Cross-Site Request Forgery

Summary InfraPower Manager PPS-02-S is a FREE built-in GUI of each IP dongle IPD-02-S only to remotely monitor the connected PDUs. Patented IP Dongle provides IP remote access to the PDUs by a true network IP address chain. Only 1xIP dongle allows access to max. 16 PDUs in daisy chain - which is ...