mms-company.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1082560 Security Researcher geeknik Helped patch 8930 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting mms-company.ru website and...

mms-dpo.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1075163 Security Researcher geeknik Helped patch 8675 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting mms-dpo.ru website and its...

CVE-2020-2599

Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications component: MMS All. The supported version that is affected is 7.30.567. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality Cruise Materials...

PT-2020-19361 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 versions prior to 1.4.1 Description: The issue arises from a heap-based buffer overflow in the MmsValue decodeMmsData function when parsing the MMS BIT STRING data type. This occurs in the mms/iso mms/server/mms access result.c fi...

libIEC61850 Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A buffer overflow vulnerability exists in the 'MmsValuedecodeMmsData' function in the mms/isomms/server/mmsaccessresult.c file in libIEC61850 version 1.4.0. The vulnerability stems from a network system or product performing...

CVE-2019-19957

In libIEC61850 1.4.0, getNumberOfElements in mms/isomms/server/mmsaccessresult.c has an out-of-bounds read vulnerability, related to bufPos and elementLength...

libIEC61850 'BerDecoder_decodeUint32' function buffer overflow vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A buffer overflow vulnerability exists in the 'BerDecoderdecodeUint32' function in the mms/asn1/berdecode.c file in libIEC61850 version 1.4.0. The vulnerability stems from a networked system or product performing operations in memo...

CVE-2019-19944

In libIEC61850 1.4.0, BerDecoderdecodeUint32 in mms/asn1/berdecode.c has an out-of-bounds read, related to intLen and bufPos...

Out-of-bounds

In libIEC61850 1.4.0, BerDecoderdecodeUint32 in mms/asn1/berdecode.c has an out-of-bounds read, related to intLen and bufPos...

CVE-2019-19931

In libIEC61850 1.4.0, MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c has a heap-based buffer overflow...

PT-2019-14678 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 versions prior to 1.3.4 Description: The issue is related to a use-after-free in the MmsServer waitReady function located in the mms/iso mms/server/mms server.c file. This can be demonstrated using the server example goose...

The Fully Remote Attack Surface of the iPhone

Posted by Natalie Silvanovich, Project Zero While there have been several rumours and reports of fully remote vulnerabilities affecting the iPhone being used by attackers in the last couple of years, limited information is available about the technical details of these vulnerabilities, as well as...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

Buffer overflow

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

CVE-2019-1010300 affects mz-automation libiec61850 1.3.0–1.3.2; vulnerability is a buffer overflow in server_example_complex_array that can cause a software crash. Attack vector is sending a specific MMS protocol packet. NVD metrics show CVSS v3.0 base score 7.5 (HIGH), network attack vector, low...

SEL AcSELerator Architect 2.2.24 Denial Of Service

!/usr/bin/env python coding: utf8 SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service Vendor: Schweitzer Engineering Laboratories, Inc. Product web page: https://www.selinc.com Affected version: 2.2.24.0 ICD package version: 2.38.0 Summary: Substation communications networks...

SEL AcSELerator Architect 2.2.24 - CPU Exhaustion Denial of Service

SEL AcSELerator Architect 2.2.24 - CPU Exhaustion Denial of Service !/usr/bin/env python coding: utf8 SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service Vendor: Schweitzer Engineering Laboratories, Inc. Product web page: https://www.selinc.com Affected version: 2.2.24.0 ICD...

SEL AcSELerator Architect 2.2.24 - CPU Exhaustion Denial of Service Exploit

!/usr/bin/env python coding: utf8 SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service Vendor: Schweitzer Engineering Laboratories, Inc. Product web page: https://www.selinc.com Affected version: 2.2.24.0 ICD package version: 2.38.0 Summary: Substation communications networks...