SQL injection vulnerability in Us***_Ro***.aspx file in the background of Qixing intranet OA system.

Qixing OA system formerly Qixing Portal system contains news, notifications, documents, gallery and process form content. A SQL injection vulnerability exists in the backend of Qixing Intranet OA System, which can be exploited by attackers to manipulate the database...

SQL injection vulnerability in My***.aspx file in the background of Qixing intranet OA system

Qixing OA system formerly Qixing Portal system contains news, notifications, documents, gallery and process form content. A SQL injection vulnerability exists in the My.aspx file in the background of the Qixing Intranet OA System, which can be exploited by attackers to manipulate the database...

CVE-2018-13799

The CVE-2018-13799 vulnerability affects SIMATIC WinCC OA V3.14 and earlier (

CVE-2018-13799

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

CVE-2018-13799

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

Improper access control

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

CVE-2018-13799

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

CVE-2018-13799: Improper Privilege Management

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

PT-2018-1568

Name of the Vulnerable Software and Affected Versions SIMATIC WinCC OA versions prior to V3.14-P021 Description A vulnerability has been identified that could allow an unauthenticated remote user to escalate privileges in the context of SIMATIC WinCC OA. This issue is related to improper access...

ICSA-18-254-04 Siemens SIMATIC WinCC OA

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC WinCC OA Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated remote user to escalate...

Siemens OpenSSL Vulnerability in Industrial Products (Update E)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Siemens Equipment : Industrial Products Vulnerability : Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-18-226-02 Siemens...

Arbitrary File Download Vulnerability in Tongda OA of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is an arbitrary file download...

oa-israel.org XSS vulnerability

Open Bug Bounty ID: OBB-631191 Description| Value ---|--- Affected Website:| oa-israel.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security feature bypass

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

CVE-2018-4847

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

CVE-2018-4847

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

CVE-2018-4847: Insertion of Sensitive Information into Externally-Accessible File or Directory

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

PT-2018-16566

Name of the Vulnerable Software and Affected Versions SIMATIC WinCC OA Operator iOS App versions prior to V1.4 Description A security issue has been identified due to insufficient protection of sensitive information, such as session keys for accessing the server, in the Siemens WinCC OA Operator...

SIMATIC WinCC OA Operator iOS Information Disclosure Vulnerability

SIMATIC WinCC OA Operator iOS is an application that makes it easy to control SIMATIC WinCC OA devices from a mobile device. An information disclosure vulnerability exists in SIMATIC WinCC OA Operator iOS. It allows an attacker to read unencrypted data from the application's directory. A...

Siemens SIMATIC WinCC OA Operator IOS App (Update A)

1. EXECUTIVE SUMMARY CVSS v3 4.0 Vendor : Siemens Equipment : SIMATIC WinCC OA iOS App Vulnerability : File and Directory Information Exposure. 2 UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-109-01 Siemens SIMATIC WinCC OA Operator iOS App that...