Design/Logic Flaw

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy...

CVE-2016-4514

The CVE-2016-4514 issue affects Moxa PT-7728 Series Switches (software 3.4 build 15081113). The vulnerability is improper authorization, enabling remote authenticated users to change switch configuration via vectors involving a local proxy, with remote exploitability reported by ICS-CERT/Tenable ...

CVE-2016-4514

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy...

PT-2016-5995

Name of the Vulnerable Software and Affected Versions Moxa PT-7728 devices with software 3.4 build 15081113 Description The issue allows remote authenticated users to change the configuration of Moxa PT-7728 devices via vectors involving a local proxy. Recommendations For Moxa PT-7728 devices wit...

CVE-2016-4514: Incorrect Authorization

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy...

Moxa PT-7728 Unauthorized Access Vulnerability

Moxa PT-7728 is an Ethernet switch product from Moxa for managing industrial applications. A security vulnerability exists in the Moxa PT-7728 version 3.4 build 15081113, which originates from the program failing to properly perform authentication. A remote attacker could exploit the vulnerabilit...

CVE-2015-8554

Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional aka qemu-dm device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries,...

CVE-2015-8554: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional aka qemu-dm device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries,...

Moxa PT-7728 Series Switch Improper Authorization Vulnerability

OVERVIEW Researcher Can Demirel of Biznet Bilisim has identified an improper authorization vulnerability in Moxa’s Industrial Ethernet Switch PT-7728 series. Moxa has produced an update to mitigate this vulnerability. Can Demirel has tested the update to validate that it resolves the vulnerabilit...

PT-2016-1519

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.19-18+deb8u4 on Debian jessie glibc versions prior to 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS glibc versions prior to 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS glibc versions prior to 2.21-0ubuntu4.2 on Ubuntu 15.10 glibc...

Ubuntu 15.10 - PT Chown Arbitrary PTs Access Via User Namespace Privilege Escalation

Ubuntu 15.10 - PT Chown Arbitrary PTs Access Via User Namespace Privilege Escalation Source: http://www.halfdog.net/Security/2015/PtChownArbitraryPtsAccessViaUserNamespace/ Introduction Problem description: With Ubuntu Wily and earlier, /usr/lib/ptchown was used to change ownership of slave pts...

Ubuntu < 15.10 - PT Chown Arbitrary PTs Access Via User Namespace Privilege Escalation

Source: http://www.halfdog.net/Security/2015/PtChownArbitraryPtsAccessViaUserNamespace/ Introduction Problem description: With Ubuntu Wily and earlier, /usr/lib/ptchown was used to change ownership of slave pts devices in /dev/pts to the same uid holding the master file descriptor for the slave...

pt-br.hattrick.org XSS vulnerability

Open Bug Bounty ID: OBB-126269 Description| Value ---|--- Affected Website:| pt-br.hattrick.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2016-3926

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier Description A buffer overflow issue exists in the hw/pt-msi.c file of Xen, specifically when using the qemu-xen-traditional device model. This issue can be exploited by local x86 HVM guest administrators to gain...

Xen 'pt-msi.c' Heap Memory Corruption Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen 'pt-msi.c' has a memory corruption vulnerability. An attacker is allowed to exploit this vulnerability to crash an application or execute arbitrary code...

PT-2015-2836 · Adobe +3 · Flash Player +4

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime versions affected versions not specified Adobe Flash Player versions affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote...

PT-2015-6136

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not describe a vulnerability but rather indicates that a candidate number is a duplicate and should not be used. It references another identifier,...

The vulnerabilities of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, allow attackers to cause malfunctions during maintenance operations.

The vulnerability of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PT-2015-5229

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA due to further investigation showing it cannot be considered a security issue in the originally named product because of that...

IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow

IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com...