Code injection

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse...

CVE-2013-0687

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse...

CVE-2013-0687

The issue CVE-2013-0687 affects Schneider Electric MiCOM S1 Studio Software. The root cause is world-writable permissions set on executable files within the MiCOM S1 Studio installation, enabling a local attacker with access to replace executables in the program files directory. Consequences incl...

Alstom Grid S1 Agile Improper Authorization

OVERVIEW This advisory provides mitigation details for a vulnerability affecting the Alstom Grid MiCOM S1 Agile and S1 Studio Software. Note: Alstom Grid MiCOM S1 Studio Software is its own software suite. A user could have MiCOM S1 Studio Software from a different vendor. This advisory only...

Schneider Electric MiCOM S1 Studio Improper Authorization Vulnerability

Overview This advisory provides mitigation details for a vulnerability affecting the Schneider Electric MiCOM S1 Studio Software. Independent researcher Michael Toecker of Digital Bond has identified an improper authorization vulnerability in the MiCOM S1 Studio Software using the Microsoft Attac...

Unfixed XSS vulnerability at s1.asmandez.ir

Security researcher Securitylab.ir, has submitted on 18/02/2011 a cross-site-scripting XSS vulnerability affecting s1.asmandez.ir, which at the time of submission ranked 66436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at s1.accesoperu.com

Security researcher s E t H - X-C3LL, has submitted on 15/02/2009 a cross-site-scripting XSS vulnerability affecting s1.accesoperu.com, which at the time of submission ranked 509692 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It...

Unfixed XSS vulnerability at s1.klansavaslari.net

Security researcher AVENUE-, has submitted on 06/03/2008 a cross-site-scripting XSS vulnerability affecting s1.klansavaslari.net, which at the time of submission ranked 8898 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Unfixed XSS vulnerability at s1.ba.gladiatus.org

Security researcher Saime, has submitted on 05/05/2008 a cross-site-scripting XSS vulnerability affecting s1.ba.gladiatus.org, which at the time of submission ranked 21544 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

Buffer overflow

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

CVE-2007-4426

Live for Speed LFS S1 and S2 allows remote attackers to cause a denial of service server crash via 1 a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or 2 a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference...

[Full-disclosure] Multiple vulnerabilities in Live for Speed 0.5X10

Luigi Auriemma Application: Live for Speed http://www.lfs.net Versions: = 0.5X10 Platforms: Windows Bugs: A nickname buffer-overflow B partial track buffer-overflow C NULL pointer access in internet/hidden S1/S2 servers D memcpy NULL pointer in internet/hidden S1/S2 servers Exploitation: remote,...

Live for Speed S1/S2/Demo (.spr file) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================= Live for Speed S1/S2/Demo .spr file Buffer Overflow Exploit ============================================================= / 0day Live for speed patch x s2 /s1 and demo local .Spr...

Unfixed XSS vulnerability at s1.gladiatus.net

Security researcher THE-SH0CK-B0Y, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting s1.gladiatus.net, which at the time of submission ranked 174969 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

maxwebportal136-2.txt

------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if webmaxportal version is : Version 1.36 , 2.0 please input...