3468 matches found
MICROSYS PROMOTIC Memory Corruption Vulnerability
OVERVIEW Security researcher Praveen Darshanam of Versa Networks has identified a memory corruption vulnerability in the MICROSYS, spol. s r.o. PROMOTIC application. MICROSYS has produced a new version to mitigate this vulnerability. The researcher has tested the new version to validate that it...
OMRON FINS TCP Protocol Detection
Binary data scadaomrontcpdetect.nbin...
OMRON FINS UDP Protocol Detection
Binary data scadaomronudpdetect.nbin...
CAREL PlantVisor Enhanced Authentication Bypass Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified an authorization bypass vulnerability in CAREL’s PlantVisor application. CAREL has confirmed that this vulnerability refers to the phased-out CAREL product PlantVisorEnhanced and is no longer supported. This vulnerability could be exploite...
Kabona AB WDC Open Redirect Vulnerability (CNVD-2016-09845)
Kabona AB WDC is a web-based SCADA system from the Swedish company Kabona AB. An open redirection vulnerability exists in Kabona AB WDC versions prior to 3.4.0. An attacker can exploit this vulnerability to redirect users to a malicious page...
HikVision Security Systems - Activex Buffer Overflow
HikVision Security Systems - Activex Buffer Overflow !/usr/bin/env python The exploit is a part of EAST Framework - use only under the license agreement specified in LICENSE.txt in your EAST Framework distribution visit eastfw.com eastexploits.com for more info import sys import re import os impo...
Kabona AB WDC Open Redirect Vulnerability
Kabona AB WDC is a web-based SCADA system from the Swedish company Kabona AB. An open redirection vulnerability exists in Kabona AB WDC versions prior to 3.4.0. An attacker can exploit this vulnerability to redirect users to a malicious page...
Advantech WebAccess Vulnerabilities
OVERVIEW Ilya Karpov of Positive Technologies, Ivan Sanchez, Andrea Micalizzi, Ariele Caltabiano, Fritz Sands, Steven Seeley, and an anonymous researcher have identified multiple vulnerabilities in Advantech WebAccess application. Many of these vulnerabilities were reported through the Zero Day...
Kabona AB WDC Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-17-287-07 Kabona AB WDC Vulnerabilities that was published October 13, 2016, on the NCCIC/ICS-CERT web site. Martin Jartelius and John Stock of Outpost 24 have identified vulnerabilities in Kabona AB’s...
INDAS Web SCADA Directory Traversal Vulnerability
INDAS Web SCADA is a web-based SCADA system from INDAS Serbia. A directory traversal vulnerability exists in versions prior to INDAS Web SCADA 3. A remote attacker could exploit this vulnerability to read arbitrary files...
CVE-2016-8343
Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-8343
INDAS Web SCADA suffers a directory traversal vulnerability (CVE-2016-8343) in versions prior to 3, enabling remote attackers to read arbitrary files. The root cause is improper path handling that allows untrusted input to access restricted directories. Impact is consistent with a high-confidenti...
EUVD-2016-9191
Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-8343
Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors...
ICS-CERT Report Grim Reminder of State of Critical Infrastructure Security
U.S. critical infrastructure got another reminder this week that it needs to do more to protect itself from cyber attacks with the release of an annual government report. The NCCIC/ICS-CERT FY 2015 Annual Vulnerability Coordination Report points out that nagging issues continue to plague industri...
Moxa NPort 5232-N Serial-to-Ethernet Device Version Detection (SCADA)
Binary data 9575.prm...
SA131 : TCP Session Hijacking in Operating Systems Supporting RFC 5961
SUMMARY Blue Coat products that include a vulnerable version of an operating system that supports RFC 5961 are susceptible to a TCP session hijacking vulnerability. A remote, off-path attacker can infer the sequence numbers of an existing TCP connection, and either reset the connection or inject...