Huawei eSpace 1.1.11.103 - DLL Hijacking Exploit

Exploit for windows platform in category local exploits / Huawei eSpace Desktop DLL Hijacking Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpace UC Summary: Create...

Huawei eSpace 1.1.11.103 Meeting Heap Overflow

Huawei eSpace Meeting ContactsCtrl.dll and eSpaceStatusCtrl.dll ActiveX Heap Overflow Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpace UC eSpace UC V200R002C02 Summary: Create...

Microsoft Windows Latest Servicing Stack Updates-Defense in Depth (KB4500640)

This host is missing an important security update according to Microsoft KB4500640. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Rockwell Automation/Allen-Bradley 1768-EWEB Ethernet/IP Enhanced Web Server Module

Binary data 69.prm...

Rockwell Automation PointIO 8pt 24Vdc Source Output Enhanced 1734-OB8E/C General Purpose Discrete I/O

Binary data 752603.prm...

Rockwell Automation PointIO 4pt 24Vdc Sink Output Enhanced 1734-OV4E/C General Purpose Discrete I/O

Binary data 752569.prm...

Rockwell Automation PointIO 8pt 24Vdc Sink Output Enhanced 1734-OV8E/C General Purpose Discrete I/O

Binary data 752633.prm...

Rockwell Automation PowerFlex 70 EC 20A... (with Enhanced Control) DPI to EtherNet/IP

Binary data 754493.prm...

Rockwell Automation PointIO 2pt 24Vdc Sink Output Enhanced 1734-OV2E/C General Purpose Discrete I/O

Binary data 752568.prm...

Rockwell Automation PowerFlex 70 EC 20A... (with Enhanced Control) DPI to DLR EtherNet/IP

Binary data 754720.prm...

Rockwell Automation PointIO 2pt 24Vdc Source Output Enhanced 1734-OB2E General Purpose Discrete I/O

Binary data 752545.prm...

mod_auth_mellon: authentication bypass in ECP flow

A vulnerability was found in modauthmellon. If Apache is configured as a reverse proxy and modauthmellon is configured to only let through authenticated users with the require valid-user directive, adding special HTTP headers that are normally used to start the special SAML ECP non-browser based...

[SECURITY] Fedora 30 Update: glpi-9.4.1.1-1.fc30

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Code injection

The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the...

The vulnerability of the WEB interface of the microprogramming software for Pelco Sarix Enhanced cameras allows a intruder to execute arbitrary commands.

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands through the WEB interface...

Fedora 29 : ckeditor (2019-ae7f274d24)

CKEditor 4.11.2 Fixed Issues : - 2403: Fixed: Styling inline editor initialized inside a table with the Table Selection plugin is causing style leaks. - 2514: Fixed: Pasting table data into inline editor initialized inside a table with the Table Selection plugin inserts pasted content into the...

The vulnerability of the web interface of Pelco Sarix Enhanced camera software allows a intruder to delete any file they desire.

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to errors in access control management. Exploiting this vulnerability could allow a remote attacker to delete any file they desire...

The vulnerability of the web interface of the microprogramming software for Pelco cameras, models Sarix Enhanced and Spectra Enhanced, allows a intruder to execute any JavaScript code in the user’s browser.

The vulnerability of the web interfaces of Pelco Sarix Enhanced and Spectra Enhanced microprogramming systems lies in the insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser...

The vulnerability of the microprogrammed software of Pelco Sarix Enhanced and Spectra Enhanced cameras, related to insufficient neutralization of specific elements in the request, allows a intruder to execute arbitrary system commands.

The vulnerability of the microprogrammed software in Pelco Sarix Enhanced and Spectra Enhanced cameras is related to the insufficient neutralization of specific elements in the request. Exploiting this vulnerability can allow a intruder to execute arbitrary system commands...

The vulnerability of the microprogramming software used in Pelco Sarix Enhanced and Spectra Enhanced cameras arises from insufficient verification of the authenticity of the requests being sent. This allows intruders to gain access to the camera’s interface.

The vulnerability of the microprogramming software used in Pelco Sarix Enhanced and Spectra Enhanced cameras is related to insufficient verification of the authenticity of the requests being sent. Exploiting this vulnerability can allow a intruder to gain access to the camera through a specially...