488 matches found
CVE-2020-10382
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...
CVE-2020-10381
CVE-2020-10381 affects the MB CONNECT LINE software family (mymbCONNECT24 and mbCONNECT24) up to version 2.5.0. The vulnerability is an unauthenticated SQL injection in DATA24, allowing an attacker to discover database and table names. Practical impact is disclosure of schema information without ...
CVE-2020-10381
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...
PT-2020-12052 · Mb Connect Line · Mbconnect24
Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions through 2.5.0 mymbCONNECT24 versions through 2.5.0 Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software. There is an authenticated remote code execution in the backup-schedule...
PT-2020-2040 · Php +7 · Php +7
Name of the Vulnerable Software and Affected Versions: PHP versions 7.3.x below 7.3.16 PHP versions 7.4.x below 7.4.4 Description: The issue is related to the use of the mb strtolower function with UTF-32LE encoding in PHP. Certain invalid strings could cause PHP to overwrite the stack-allocated...
Moxa MGate 5105-MB-EIP OS Command Injection Vulnerability
The MGate 5105-MB-EIP is an industrial Ethernet gateway that supports MQTT or third-party cloud services e.g., Azure and Alibaba Cloud to build Modbus RTU/ASCII/TCP and EtherNet/IP network communications for IIoT applications. An operating system command injection vulnerability exists in the...
CVE-2020-8858
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authentication is required to exploit this vulnerability. The specific flaw exists within the DestIP parameter within MainPing.asp. The issue results from...
CVE-2020-8858
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authentication is required to exploit this vulnerability. The specific flaw exists within the DestIP parameter within MainPing.asp. The issue results from...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authentication is required to exploit this vulnerability. The specific flaw exists within the DestIP parameter within MainPing.asp. The issue results from...
CVE-2020-8858
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authentication is required to exploit this vulnerability. The specific flaw exists within the DestIP parameter within MainPing.asp. The issue results from...
Moxa MGate 5105-MB-EIP DestIP Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP. Authentication is required to exploit this vulnerability. The specific flaw exists within the DestIP parameter within MainPing.asp. The issue results from the lack of proper...
mb-autohouse.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1076647 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
mb-autohouse.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1075162 Security Researcher geeknik Helped patch 8675 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting mb-autohouse.ru website an...
PT-2019-12566 · Facebook · Hhvm
Name of the Vulnerable Software and Affected Versions: HHVM versions prior to 3.30.12 HHVM versions 4.0.0 through 4.8.5 HHVM versions 4.9.0 through 4.23.1 HHVM versions 4.24.0 through 4.28.1 Description: The issue is caused by an invalid free in mb detect order, which can lead to application...
Softing uaGate SI, uaGate MB and uaGate 840D Command Injection Vulnerabilities
Softing uaGate SI and others are products of Softing Germany.Softing uaGate SI is a compact industrial gateway.Softing uaGate 840D is an IoT gateway.Softing uaGate MB is a gateway for Modbus TCP controllers. A command injection vulnerability exists in the CGI scripts in the Softing uaGate SI,...
FANUC 18-MB Control System
Binary data 764772.prm...
FANUC 18-MB Control System
Binary data 764771.prm...
Exploit for CVE-2019-14339
CVE-2019-14339 Content Provider URI Injection on Canon PRINT...