Interactive Graphical SCADA System Data Server 缓冲区错误漏洞

The Schneider Electric Interactive Graphical Scada System is a Scada system for monitoring industrial processes from Schneider Electric, France. An out-of-bounds read vulnerability exists in the Schneider Electric Interactive Graphical Scada System, which can be exploited by an attacker to cause ...

PT-2022-16600

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description A CWE-665: Improper Initialization issue exists, potentially causing information exposure when an attacker sends a specially crafted message...

CVE-2022-24316: Improper Initialization

A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server V15.0.0.22020 and prior...

CVE-2022-24313: Buffer Copy without Checking Size of Input

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server V15.0.0.22020...

CVE-2022-24311: Improper Limitation of a Pathname to a Restricted Directory

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends...

PT-2022-16601

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions prior to 15.0.0.22020 Description A Missing Authorization issue exists that could cause information exposure when an attacker sends a specific message. Recommendations For versions prior ...

PT-2022-2279

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description A denial of service issue exists due to an out-of-bounds read. This could be triggered by an attacker sending a specially crafted message, potentially...

PT-2022-2281

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description A vulnerability exists that could cause modification of an existing file by adding to the end of the file or create a new file in the context of the Da...

PT-2022-1814

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description The issue is related to an out-of-bounds read, which could cause memory leaks and potentially result in denial of service. This can happen when an...

PT-2022-2280

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description The issue is caused by a stack-based buffer overflow due to a buffer copy without checking the size of the input. This could potentially lead to remote...

PT-2022-2282

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description The issue is caused by an integer overflow or wraparound, leading to a heap-based buffer overflow. This could allow a remote attacker to cause a denial...

PT-2022-1815

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description A vulnerability exists that could cause modification of an existing file by inserting at the beginning of the file or create a new file in the context ...

RecoverPy - Interactively Find And Recover Deleted Or Overwritten Files From Your Terminal

You can already find plenty of solutions to recover deleted files, but it can be a hassle to recover overwritten files. RecoverPy searches through every block of your partition to find your request. Demo Installation  RecoverPy is currently only available on Linux systems. Dependancies Mandatory...

[SECURITY] Fedora 35 Update: rust-below-0.4.1-3.fc35

below is an interactive tool to view and record historical system data. It has support for: - information regarding hardware resource utilization - viewing the cgroup hierarchy - cgroup and process information - pressure stall information PSI - record mode to record system data - replay mode to...

Exploit for Incomplete Cleanup in Linux Linux_Kernel

CVE-2021-4032-NoGCC Test in: Ubuntu 20...

CVE-2022-21699

CVE-2022-21699 affects IPython and allows cross-user code execution by IPython potentially executing config files from the current working directory. The vulnerability arises from not properly managing cross-user temporary files, enabling one user to run code as another on the same machine. Publi...

Interactive Python 安全漏洞

Interactive Python IPython is a command shell for interactive computation using multiple programming languages, originally developed for the Python programming language. A security vulnerability exists in Interactive Python that can be exploited by an attacker to run code as another user...

Rustpad - Multi-Threaded Padding Oracle Attacks Against Any Service

A multi-threaded what now? rustpad is a multi-threaded successor to the classic padbuster, written in Rust. It abuses a Padding Oracle vulnerability to decrypt any cypher text or encrypt arbitrary plain text without knowing the encryption key! Features Decryption of cypher texts Encryption of...

The vulnerability of the userauth_keyboard_interactive() function in the userauth.c component of the libssh2 library allows a hacker to execute arbitrary code.

The vulnerability of the userauthkeyboardinteractive function in the userauth.c component of the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

react-here-map-interactive (>=0.0.1, <=0.9.2) potentially affected by CVE-2021-23700 via merge-deep2 (3.0.6)

merge-deep2 NPM version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on merge-deep2 and may be impacted: - react-here-map-interactive =0.0.1, =0.9.2 Source cves: CVE-2021-23700 Source advisory: OSV:GHSA-J28Q-P8WW-CP87...