Stack overflow

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a 1 2001, 2 2002, or 3 2003 opcode to port 3000...

CVE-2014-100014

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a 1 2001, 2 2002, or 3 2003 opcode to port 3000...

CVE-2014-100015

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload...

CVE-2014-100014

Affected product: SolidWorks Workgroup PDM 2014 SP2. Vulnerability: pdmwService.exe contains multiple stack-based buffer overflows exploitable by sending a long string (opcodes 2001/2002/2003) to port 3000, enabling remote code execution. The connected sources confirm the flaw but do not provide ...

CVE-2014-100015

CVE-2014-100015 affects SolidWorks Workgroup PDM 2014, specifically the pdmwService.exe component. The documented vulnerability is a directory traversal in a file upload mechanism, allowing remote attackers to write to arbitrary files by using a path with "..". Public references indicate exploit ...

CVE-2014-100014: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a 1 2001, 2 2002, or 3 2003 opcode to port 3000...

CVE-2014-100015: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload...

PT-2015-3621

Name of the Vulnerable Software and Affected Versions SolidWorks Workgroup PDM version 2014 Description The issue allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload, potentially leading to unauthorized file modifications. Recommendations For...

PT-2015-3620

Name of the Vulnerable Software and Affected Versions SolidWorks Workgroup PDM version 2014 SP2 Description The issue is related to multiple stack-based buffer overflows in the pdmwService.exe component. This can be exploited by remote attackers who send a long string in specific opcodes to port...

SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 - Denial of Service

No description provided by source. ''' Exploit Title: SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Remote Code Execution Vulnerability Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...

SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write Vulnerability

No description provided by source. ''' Title: SolidWorks Workgroup PDM 2014 SP2 Arbitrary File Write Vulnerability Date: 2-21-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.solidworks.com/sw/products/product-data-management/workgroup-pdm.htm Tested on:...

Gatesoft Docusafe 4.1.0 - SQL Injection Vulnerability

No description provided by source. Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com,...

SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::Tcp include Msf::Exploit::EXE...

SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write Exploit

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write', 'Description' = %q This module exploits a remote arbitrary file write vulnerability in SolidWorks Workgroup PDM 2014 SP2 and prior. F...

SolidWorks Workgroup PDM 2014 - 'pdmwService.exe' Arbitrary File Write (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write', 'Description' = %q This module exploits a remote arbitrary file...

SolidWorks Workgroup PDM 2014 Arbitrary File Write Exploit

This Metasploit module exploits a remote arbitrary file write vulnerability in SolidWorks Workgroup PDM 2014 SP2 and prior. For targets running Windows Vista or newer the payload is written to the startup folder for all users and executed upon next user logon. For targets before Windows Vista cod...

SolidWorks Workgroup PDM任意文件覆盖漏洞

BUGTRAQ ID: 65751 SolidWorks Workgroup PDM软件可帮助个人和小型工作组管理项目和控制其设计版本。 SolidWorks Workgroup PDM 2014 SP2及其他版本在实现上存在任意文件覆盖漏洞，成功利用胡可使攻击者在运行受影响应用用户上下文中覆盖任意文件。 0 SolidWorks SolidWorks Workgroup PDM 2014 SP2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.solidworks.com.cn/ !/usr/bin/env pyth...

SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write Vulnerability

SolidWorks Workgroup PDM 2014 SP2 suffers from an arbitrary file write vulnerability. ''' Title: SolidWorks Workgroup PDM 2014 SP2 Arbitrary File Write Vulnerability Date: 2-21-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...

SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write

SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write ''' Title: SolidWorks Workgroup PDM 2014 SP2 Arbitrary File Write Vulnerability Date: 2-21-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...

SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write

This module exploits a remote arbitrary file write vulnerability in SolidWorks Workgroup PDM 2014 SP2 and prior. For targets running Windows Vista or newer the payload is written to the startup folder for all users and executed upon next user logon. For targets before Windows Vista code execution...