456 matches found
CVE-2023-22855
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method Path.Combine from .NET without proper sanitisation. This yields the possibility of including local files, as...
mcc-complete.com Cross Site Scripting vulnerability OBB-3900354
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Kardex Mlog MCC 5.7.12 Remote Code Execution
!/usr/bin/env python3 Exploit Title: Kardex Mlog MCC 5.7.12 - RCE Remote Code Execution Date: 12/13/2022 Exploit Author: Patrick Hener Vendor Homepage: https://www.kardex.com/en/mlog-control-center Version: 5.7.12+0-a203c2a213-master Tested on: Windows Server 2016 CVE : CVE-2023-22855 Writeup:...
Kardex Mlog MCC 5.7.12 - Remote Code Execution Exploit
!/usr/bin/env python3 Exploit Title: Kardex Mlog MCC 5.7.12 - RCE Remote Code Execution Date: 12/13/2022 Exploit Author: Patrick Hener Vendor Homepage: https://www.kardex.com/en/mlog-control-center Version: 5.7.12+0-a203c2a213-master Tested on: Windows Server 2016 CVE : CVE-2023-22855 Writeup:...
Kardex Mlog MCC 5.7.12+0-a203c2a213-master File Inclusion / Remote Code Execution
Remote Code Execution in Kardex MLOG ======================================================================= Product: Kardex Mlog MCC Vendor: Kardex Holding AG Tested Version: 5.7.12+0-a203c2a213-master Fixed Version: inline patch - no new version number Vulnerability Type: Improper Control of...
CVE-2023-22855
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method Path.Combine from .NET without proper sanitisation. This yields the possibility of including local files, as...
Design/Logic Flaw
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method Path.Combine from .NET without proper sanitisation. This yields the possibility of including local files, as...
CVE-2022-38619
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...
SmartVista SVFE2 SQL注入漏洞
SmartVista SVFE2 is a subsystem of SmartVista, Inc. A security vulnerability exists in SmartVista SVFE2 version v2.2.22, which stems from a security issue with the UserForm:jid90 parameter in /SVFE2/pages/feegroups/mccgroup.jsf...
PT-2021-06: Lack of integrity checks of the MCC field
EMV used as a predecessor of mobile wallets does not require putting some mandatory fields as a cryptogram input. These fields are crucial for risk management steps, and their tampering can bypass payment restrictions. Alternatively, mobile wallets should send the information about the type of...
CVE-2020-7334
Improper privilege assignment vulnerability in the installer McAfee Application and Change Control MACC prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further...
Rockwell Automation 1336 PLUS Drive 70.0 A, 575V 1336S-C670 Smart MCC
Binary data 754371.prm...
Rockwell Automation 1336T Vector 230V/ 33.7A 1336T-A010-GT2EN Smart MCC
Binary data 754106.prm...
Rockwell Automation 1336 PLUS Drive 35.0 A, 575V 1336S-C030 Smart MCC
Binary data 754336.prm...
Rockwell Automation 1336 PLUS Drive 84.0 A, 575V 1336S-C250 Smart MCC
Binary data 754374.prm...
Rockwell Automation PowerFlex 70 EC 480V 22A 20AD022 Smart MCC
Binary data 754283.prm...
Rockwell Automation 1336 PLUS Drive 10.0 A, 575V 1336S-CWF75 Smart MCC
Binary data 754244.prm...
Rockwell Automation 1336 PLUS Drive 3.0 A, 230V 1336S Smart MCC
Binary data 754081.prm...