CVE-2019-6570: Improper Handling of Insufficient Permissions or Privileges

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability...

PT-2019-2036

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 Description The issue is related to insufficient checking of user permissions, allowing an attacker to access URLs that require special authorization. To exploit this, an attacker must have...

Siemens SINEMA Remote Connect (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINEMA Remote Connect Client and Server Vulnerabilities: Incorrect Calculation of Buffer Size, Out-of-bounds Read, Stack-based Buffer Overflow, Improper Handling of Insufficient...

Siemens SINEMA Remote Connect Server Cross-Site Scripting Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A cross-site scripting vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could...

CVE-2016-6204

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-6204

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-6204

CVE-2016-6204 describes a Cross-Site Scripting (XSS) vulnerability in the integrated web server of Siemens SINEMA Remote Connect Server (all versions before 1.2). The issue allows an attacker to inject script/HTML via a crafted URL, with remote exploitation possible and potential for read-access ...

CVE-2016-6204: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2016-6798

Name of the Vulnerable Software and Affected Versions Siemens SINEMA Remote Connect Server versions prior to 1.2 Description The issue is related to a cross-site scripting XSS vulnerability in the integrated web server. This allows remote attackers to inject arbitrary web script or HTML via a...

Siemens SINEMA Remote Connect Server Cross-site Scripting Vulnerability

OVERVIEW Researchers Antonio Morales Maldonado of INNOTEC SYSTEM, and Alexander Van Maele and Tijl Deneut of Howest have identified a cross-site scripting XSS vulnerability in the Siemens SINEMA Remote Connect Server application. Siemens has produced an update to mitigate this vulnerability. This...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...

Chatwm 1.0 SelGruFra.ASP SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21732/info Chatwm is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An...

Chatwm V1.0 SqL Injection Vuln.

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : chatwm V1.0 Script Download : http://maxiasp.com/scyorum.asp?scno=225 Risk : High GoogLe Dork : chatwm Found By : ShaFuck31 Thanks : | Dekolax | The RйD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0...

aspee.txt

LiderHack.Org Script name : Aspee Ziyaretçi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

metyus.txt

LiderHack.Org script name : Metyus Okul Yönetim Sistemi V.1.0 tr Script Download : http://www.maxiasp.com/scriptler.asp?ktno=1 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : uyegirisislem.asp Manual connect : Go to Admin Panel Login -----...

Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.

LiderHack.Org script name : Metyus Okul Ynetim Sistemi V.1.0 tr Script Download : http://www.maxiasp.com/scriptler.asp?ktno=1 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : uyegirisislem.asp Manual connect : Go to Admin Panel Login -----...