The vulnerability of Schneider Electric’s Modbus Serial Driver for programmable logic controllers allows a perpetrator to execute arbitrary code.

The multiple vulnerabilities in the Schneider Electric Modbus Serial Driver are caused by buffer overflows on the stack. Exploitation of these vulnerabilities allows an attacker to execute arbitrary code using a high value for the buffer size in the Modbus application header...

CVE-2016-10175

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

Design/Logic Flaw

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

CVE-2016-10175

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

CVE-2016-10175

NETGEAR WNR2000v5 has an information-disclosure issue: a request to /BRS_netgear_success.html leaks the router’s serial number, enabling an attacker to obtain the administrator username and password in conjunction with CVE-2016-10176 (password-recovery bypass). No remediation details are provided...

CVE-2016-10175

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

CVE-2017-5579

Memory leak in the serialexitcore function in hw/char/serial.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption and QEMU process crash via a large number of device unplug operations...

DEBIAN-CVE-2016-8405

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

CVE-2016-8407

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

EasyNetSites 'nameDetail.php' Page SQL Injection Vulnerability

EasyNetSites is a WEB-based tool for managing organizational relationships on websites. A SQL injection vulnerability exists in the sn parameter of the nameDetail.php page of EasyNetSites, which originates from the program's failure to adequately filter user-submitted input, and can be exploited ...

UBUNTU-CVE-2016-9911

Quick Emulator Qemu built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehciinittransfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

UBUNTU-CVE-2016-9907

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

CVE-2016-3685

SAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on Windows and Mac systems, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of a hardcoded key in the program code and a computer BIOS serial...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-1438)

The openSUSE 14.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. The...

Moxa NPort Cross-Site Scripting Vulnerability

MOXA Nport is a serial communication server. A cross-site scripting vulnerability exists in Moxa NPort. An attacker can exploit the vulnerability to launch a cross-site attack...

Moxa NPort Plaintext Storage Vulnerability

MOXA Nport is a serial communication server. A plaintext storage vulnerability exists in Moxa NPort. An attacker can exploit the vulnerability to launch further attacks due to parameters containing plaintext passwords...

Moxa NPort Authentication Vulnerability

MOXA Nport is a serial communication server. An authentication vulnerability exists in the Moxa NPort. An attacker can exploit the vulnerability to brute-force bypass authentication...

Moxa NPort Denial of Service Vulnerability

MOXA Nport is a serial communication server. A denial of service vulnerability exists in Moxa NPort. Due to an unlimited number of requests for resources, an attacker can exploit the vulnerability to cause a denial of service due to resource exhaustion...

A for TP-Link debug Protocol TDDP）vulnerability Mining the story-vulnerability warning-the black bar safety net

I wrote this article originally in order to simplify the WiFi penetration testing research work. We want to use last year by the Core Security released WIWO, it can be a computer network interface and a WiFi Router between the establishment of a transparent channel. Research the first step is to...

B+B SmartWorx VESP211 Authentication Bypass Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified an authentication bypass vulnerability in B+B SmartWorx’s VESP211 serial servers. B+B SmartWorx has produced an implementation plan to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...