DaqFactory 5.85 build 1853 - Stack Overflow

Luigi Auriemma Application: DAQFactory http://www.azeotech.com/daqfactory.php Versions: = 5.85 build 1853 Platforms: Windows Bug: stack overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

Cogent DataHub <= 7.1.1.63 Source Disclosure

Exploit for windows platform in category web applications Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: source disclosure Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail:...

Evidence of Infected SCADA Systems Washes Up in Support Forums

While security experts and lawmakers debate the seriousness of cyber threats to critical infrastructure, one security researcher says that evidence that viruses and spyware already have access to industrial control systems is hiding in plain sight: on Web based user support forums. Close to a doz...

Vulnerabilities in BroadWin WebAccess Client 1.0.0.10

Luigi Auriemma Application: BroadWin WebAccess Client http://broadwin.com/Client.htm Versions: bwocxrun.ocx = 1.0.0.10 aka version 7.0 Platforms: Windows Bugs: A format string B arbitrary memory corruption Exploitation: remote Date: 02 Sep 2011 Author: Luigi Auriemma e-mail: [email protected]...

Sunway SCADA 6.1 SP3 Buffer Overflow

!/usr/bin/perl Sunway SCADA Add User Exploit for fun ; Tested on XP SP1 | | | | | | | | | | | | ' \ / \ | |/ \ | |/ / |/ |/ | | | | | | | | / | | | | | | | | | | || | || |||||/ ||\|,|,|, | |/ Bir turlu olamayanin avuntusu; "underground'im ben" demek Demek benim ustumden yiyecegini sandin...

Sunway Force Control SCADA 6.1 SP3 SEH Overwrite

Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat cbolat.blogspot.com for fun ; notez: other payloads not working stable...

Sunway Force Control SCADA 6.1 SP3 - 'httpsrv.exe' Remote Overflow

Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat cbolat.blogspot.com for fun ; notez: other payloads not working stable...

Sunway Force Control SCADA 6.1 SP3 - httpsrv.exe Remote Overflow

Sunway Force Control SCADA 6.1 SP3 - httpsrv.exe Remote Overflow Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat...

Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit

Exploit for windows platform in category remote exploits Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat...

7T Interactive Graphical SCADA System (IGSS) Directory Traversal (CVE-2011-1565)

A directory traversal vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to read a...

7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)

A file execution vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to execute...

7-Technologies Interactive Graphical SCADA System Detection (Windows SMB Login)

SMB login-based detection of the Interactive Graphical SCADA System. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Interactive Graphical SCADA System ODBC Server Buffer Overflow Vulnerability

This host is installed with Interactive Graphical SCADA System and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbigssodbcserverbofvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Interactive Graphical SCADA System ODBC Server Buffer Overflow Vulnerability Authors: Soora...

Interactive Graphical SCADA System ODBC Server Buffer Overflow Vulnerability

Interactive Graphical SCADA System is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Get Ready for Hacker Halted 2011, Miami 21-27 October

Get Ready for Hacker Halted 2011, Miami 21-27 October Hacker Halted returns to Miami for the 3rd year in a row. Following last year's success, we are expecting this year to be bigger and better. Hacker Halted will feature 4 focus tracks: 1.What's Hot – Featuring cutting-edge presentations on key...

Get Ready for Hacker Halted 2011, Miami 21-27 October

Get Ready for Hacker Halted 2011 , Miami 21-27 October Hacker Halted returns to Miami for the 3rd year in a row. Following last year's success, we are expecting this year to be bigger and better. Hacker Halted will feature 4 focus tracks: 1.What's Hot – Featuring cutting-edge presentations on key...

Siemens Tecnomatix FactoryLink SCADA VRN Server Arbitrary File Download

An arbitrary file download vulnerability has been reported in Siemens Tecnomatix FactoryLink SCADA VRN Server. The vulnerability is due to a boundary error in the application's VRN Server, which occurs while handling incoming message requests. A remote attacker could trigger this vulnerability by...

Siemens Tecnomatix FactoryLink SCADA VRN Server Multiple Buffer Overflows

Multiple buffer overflow vulnerabilities have been reported in Siemens Tecnomatix FactoryLink VRN Server SCADA system. The vulnerabilities are due to a boundary error in the application's VRN Server, which occurs while handling incoming message requests. A remote attacker could leverage these...

TeeChart Professional ActiveX Control 2010.0.0.3 Trusted Integer Dereference

$Id: teechartpro.rb 13554 2011-08-13 02:05:08Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

TeeChart Professional ActiveX Control Trusted Integer Dereference

This module exploits an integer overflow in TeeChart Pro ActiveX control. When sending an overly large/negative integer value to the AddSeries property of TeeChart2010.ocx, the code will perform an arithmetic operation that wraps the value and is later directly trusted and called upon. This modul...