Out-of-bounds

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a...

CVE-2016-5796

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a...

CVE-2016-5798

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

CVE-2016-5798

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

CVE-2016-5796

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a...

CVE-2016-5798

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

CVE-2016-5798

CVE-2016-5798 affects Fatek Automation PM Designer V3 (version 2.1.2.2) and FV Designer (version 1.2.8.0). The issue is a stack-based buffer overflow triggered by sending additional valid packets, leading to a crash; a separate vulnerability could trigger a remote buffer overflow on the Fatek Com...

CVE-2016-5796

CVE-2016-5796 affects Fatek Automation PM Designer V3 (2.1.2.2) and FV Designer (1.2.8.0). It is caused by Improper Restriction of Operations within the Bounds of a Memory Buffer, allowing remote attackers to crash or execute arbitrary code by sending additional valid packets. Public advisories n...

CVE-2016-5796: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a...

CVE-2016-5798: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

PT-2016-6686

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0 Description An issue allows an attacker to trigger a stack-based buffer overflow by sending additional valid packets, potentially causing a crash...

PT-2016-6684

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0 Description The issue allows an attacker to cause a crash or execute arbitrary code due to improper restriction of operations within the bounds of a memo...

pm.detik.com XSS vulnerability

Vulnerable URL: http://pm.detik.com/?continue=alert'OPENBUGBOUNTY'...

Fatek Automation PM Designer Remote Code Execution Vulnerability

Fatek Automation PM Designer is a programmable logic controller from Fatek Automation. A remote code execution vulnerability exists in Fatek Automation PM Designer, which could be exploited by an attacker to execute arbitrary code in an affected application, possibly also resulting in a denial of...

(0Day) Fatek Automation PM Designer Heap Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation PM Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

FATEK Automation Designer Memory Corruption Vulnerabilities

OVERVIEW Ariele Caltabiano kimiya working with Trend Micro’s Zero Day Initiative ZDI has identified a heap memory corruption and two stack buffer overflow vulnerabilities in Fatek’s Automation PM and FV Designer applications. Fatek has not produced an update to mitigate these vulnerabilities. ZDI...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the pm-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

PT-2016-4175

Name of the Vulnerable Software and Affected Versions IBM Cognos TM1 version 10.2.2 before FP5 Description The issue allows remote authenticated users to cause a denial of service, resulting in a configuration outage, when the host/pmhub/pm/admin AdminGroups setting is empty and a non-empty value...

pm-resources.com XSS vulnerability

Open Bug Bounty ID: OBB-131145 Description| Value ---|--- Affected Website:| pm-resources.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KingCms最新版绕过补丁（版本：9.00.0018）注入一枚

简要描述： KingCms最新版绕过补丁（版本：9.00.0018）注入一枚 详细说明： 写在前面：漏洞存在于用户发送站内信的地方，因此，测试时需要注册一个前台的普通用户。 朋友的公司购买了kingcms的授权，最近kingcms官方给我朋友发来了升级包，升级说明当中说已经解决了已知的安全问题，今天再帮朋友测试下。 自从朋友购买，已经经过了9.00.0015，9.00.0016，9.00.0017，现在更新到了9.00.0018，kingcms服务还不错。9.00.0018的更新时间是2015.07.23，见官网http://www.kingcms.com/download/k9/...