CVE-2020-12523

Affected product: Phoenix Contact mGuard Devices (versions before 8.8.3) with LAN ports or an integrated LAN switch. Root cause: On reboot, the device exhibits Missing Initialization of Resource, causing LAN ports that were disabled by configuration to become functional again. In devices with an ...

CVE-2020-12517 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website local privilege escalation...

CVE-2020-12519 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges...

Phoenix Contact PLCnext Control Devices Security Breach

Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact, Germany. A security vulnerability exists in Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS, which can be exploited by an attacker to open a reverse shel...

Phoenix Contact mGuard Devices 安全漏洞

Phoenix Contact Mguard is a firewall device for industrial environments from Phoenix Contac. The device features multiple protection modes, deep packet inspection, malware and virus detection. A security vulnerability exists in Phoenix Contact mGuard Devices, which stems from the fact that for...

Phoenix Contact PLCnext Control Devices 跨站脚本漏洞

Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. A cross-site scripting vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which originates from an authenticated, low-privileged...

Phoenix Contact PLCnext Control Devices 输入验证错误漏洞

Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. An input validation error vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which stems from a specially designed LLDP packet tha...

Phoenix Contact PLCnext Control Devices Information Disclosure Vulnerability

Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact, Germany. A security vulnerability exists in Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS, which can be exploited by an attacker to plan further attack...

CVE-2020-12524

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content Denial of Service...

Denial of service

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content Denial of Service...

CVE-2020-12524

CVE-2020-12524 affects Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W (all versions). The issue is Uncontrolled Resource Consumption causing the devices to become unresponsive and fail to update display content (Denial of Service). Root cause described as resource exhaustion; attack vect...

CVE-2020-12524 Phoenix Contact BTP Touch Panels uncontrolled resource consumption

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content Denial of Service...

Phoenix Contact HMIs Resource Management Error Vulnerability

Phoenix Contact HMIs are an intelligent solution from Phoenix Contact, Germany. It is used to control, operate and monitor machines and systems. A resource management error vulnerability exists in Phoenix Contact HMIs, which stems from uncontrolled consumption of resources that may result in an...

Multi-vendor BIOS Security Vulnerabilities (November 2020) - Lenovo Support US

No description provided...

phoenix-sfa.com Cross Site Scripting vulnerability OBB-1467513

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exploit for OS Command Injection in Oscommerce

PoC exploit for CVE-2020-27976, an authenticated remote code exe...

new.risingphoenixgrove.org Cross Site Scripting vulnerability OBB-1466260

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

osCommerce CE Phoenix OS Command Injection Vulnerability

OsCommerce is an e-commerce and online store management software program.CE Phoenix is the official community version of osCommerce. An OS command injection vulnerability exists in osCommerce CE Phoenix versions prior to 1.0.5.4. An attacker can exploit this vulnerability to execute arbitrary cod...

osCommerce Phoenix CE Cross-Site Request Forgery Vulnerability

OsCommerce is an e-commerce and online store management software program.CE Phoenix is the official community version of osCommerce. A cross-site request forgery vulnerability exists in admin/definelanguage.php in osCommerce CE Phoenix versions prior to 1.0.5.4. No details of the vulnerability ar...

CVE-2020-27976

osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option...