CVE-2010-4599

CVE-2010-4599: Affected product is Ecava IntegraXor (v3.6.4000.0). The vulnerability is an untrusted search path that lets local attackers elevate privileges by placing a malicious dwmapi.dll in the current working directory. This yields local privilege escalation for the attacker within the affe...

CVE-2010-4597

Ecava IntegraXor HMI is affected by CVE-2010-4597 due to a stack-based buffer overflow in the save method of igcomm.dll (IntegraXor.Project ActiveX) prior to version 3.5.3900.10. An attacker could remotely trigger arbitrary code execution by sending a long string in the second argument. ICS-CERT ...

CVE-2010-4598

CVE-2010-4598 affects Ecava IntegraXor web-based SCADA UI, with vulnerable versions 3.6.4000.0 and earlier. The issue is a directory traversal in the open request where a crafted file_name parameter with “..” can cause the system to disclose arbitrary files outside the web root. Public records in...

CVE-2010-4597

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface HMI before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument...

CVE-2010-4599

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-4598

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...

Ecava IntegraXor ActiveX save Method Buffer Overflow

Binary data scadaintegraxoractivexsavebof.nbin...

Ecava IntegraXor 3.6.4000.0 Directory Traversal

Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fi...

ecava IntegraXor 3.6.4000.0 - Directory Traversal

ecava IntegraXor 3.6.4000.0 - Directory Traversal Source: http://aluigi.org/adv/integraxor1-adv.txt Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010...

ecava IntegraXor 3.6.4000.0 - Directory Traversal

Source: http://aluigi.org/adv/integraxor1-adv.txt Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi Auriemma e-mail: [email protected] we...

Ecava IntegraXor Remote ActiveX Buffer Overflow PoC

!/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the "save" method of the IntegraXor.Project control located in igcomm.dll. This...

Ecava IntegraXor ActiveX buffer overflow

Buffer overflow in "save" method...

Ecava IntegraXor Remote ActiveX Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the...

Ecava IntegraXor Remote - ActiveX Buffer Overflow (PoC)

Ecava IntegraXor Remote - ActiveX Buffer Overflow PoC !/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to t...

Ecava IntegraXor Remote - ActiveX Buffer Overflow (PoC)

!/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the "save" method of the IntegraXor.Project control...

Ecava IntegraXor stack-based buffer overflow vulnerability

Overview Ecava IntegraXor contains a stack-based buffer overflow vulnerability in the Ecava IntegraXor Human-Machine Interface HMI product that could allow the execution of arbitrary code. Description According to Ecava's website: IntegraXor is a suite of tools used to create and run a web-based...

Ecava IntegraXor 3.6.4000.0 Directory Traversal

Exploit for windows platform in category remote exploits Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi Auriemma e-mail: email protected...

Ecava IntegraXor Buffer Overflow

Overview The ICS-CERT has received a report from independent security researcher Jeremy Brown that reveals a stack-based buffer overflow vulnerability in the Ecava IntegraXor Human-Machine Interface HMI product that could allow the execution of arbitrary code. Ecava has verified the claim and has...

Microsoft SQL (MSSQL) Server Brute Force Logins With Default Credentials (TCP/IP Listener)

The remote Microsoft SQL MSSQL Server has a common / publicly known password for one or more accounts. SPDX-FileCopyrightText: 2005 HD Moore SPDX-FileCopyrightText: New / improved code since 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...