Siemens 6GK1411-6CA40-0BA0 IE/WSN-PA Link Detection

Binary data 765353.prm...

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

Command execution vulnerability in PbootCMS Pa***.php page

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of free commercial PHP CMS source code , to meet the needs of enterprise website development and construction . A command execution vulnerability exists in the...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2019-36853)

Siemens SIMATIC CFU PA and others are products of Siemens, Germany.Siemens SIMATIC CFU PA is a compact field device.SIMATIC ET 200AL is a distributed I/O system module.SIMATIC ET 200M is a control cabinet for high-density channel applications. modular I/O system module. A denial of service...

Race condition

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...

Linux/x86 - Bind TCP (port 43690) Null-Free Shellcode (53 Bytes)

---------------------- DESCRIPTION ------------------------------------- ; Title: Linux/x86 bind tcp shellcode port 43690 null-free ; Author: Daniel Ortiz ; Tested on: Linux 4.18.0-25-generic 26 Ubuntu ; Size: 53 bytes ; SLAE ID: PA-9844 section .DATA section .BSS section .TEXT global start start...

CVE-2019-13923

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway All versions. The integrated configuration web server of the affected device could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for ...

Cross site scripting

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway All versions. The integrated configuration web server of the affected device could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for ...

CVE-2019-13923

The CVE-2019-13923 issue affects all versions of Siemens IE/WSN-PA Link WirelessHART Gateway. The vulnerability is Cross-Site Scripting (CWE-79) in the integrated configuration web server, allowing a malicious link to trigger client-side code execution when a logged-in user with browser access vi...

CVE-2019-13923

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway All versions. The integrated configuration web server of the affected device could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for ...

Linux/x86 - ASLR Disable Polymorphic Shellcode (107 bytes)

---------------------- DESCRIPTION ------------------------------------- ; Title: Linux x86 ASLR deactivation for Linux/x86 - Polymorphic ; Author: Daniel Ortiz ; Tested on: Linux 4.18.0-25-generic 26 Ubuntu ; Size: 107 bytes ; SLAE ID: PA-9844 ---------------------- ASM CODE...

Debian DSA-4455-1 : heimdal - security update

Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. - CVE-2018-16860 Isaac Boukris and Andrew Bartlett discovered that Heimdal was susceptible to man-in-the-middle attacks caused by incomplete checksum validation. Detai...

Debian: Security Advisory (DSA-4455-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the PA-RISC CRYPTO_memcmp function in the OpenSSL library, which allows attackers to create fake messages

The vulnerability of the PA-RISC CRYPTOmemcmp function in the OpenSSL library is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to create fake messages that will be treated as authentic...

CVE-2019-12098

In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack. This issue is in krb5initcredsstep in lib/krb5/initcredspw.c...

Heimdal man-in-the-middle attack vulnerability

Heimdal is a Kerberos 5 implementation. A security vulnerability in the krb5initcredsstep file in lib/krb5/initcredspw.c in versions of Heimdal prior to 7.6.0 stems from the program failing to validate a change to the PA-PKINIT-KX key when an anonymous PKINIT is used. An attacker could exploit th...

SQL injection vulnerability in the frontend p***_r***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTimes Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

PA-DSS to Software Security Framework: What You Need to Know

The Payment Application Data Security Standard PA-DSS developed by the Payment Card Industry Security Standards Council PCI SSC applies to software vendors and others who develop payment applications that store, process, or transmit cardholder data and/or sensitive authentication data. The list o...

Command execution vulnerability in FrogCMS Pa***.php file

FrogCMS is an enterprise building system CMS based on PHP+Mysql architecture that can run on various server platforms such as Linux, Windows and so on. FrogCMS Pa.php file has a command execution vulnerability that can be exploited by an attacker to gain access to the site permissions and so on...

pa-tank.hu XSS vulnerability

Open Bug Bounty ID: OBB-713326 Description| Value ---|--- Affected Website:| pa-tank.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...