151 matches found
Understanding TRITON and the Missing Final Stage of the Attack
In December 2017 it was reported that a Middle Eastern oil and gas petrochemical facility had undergone a safety system shutdown as the result of a malware attack. The malware, named TRITON also TRISIS or HatMan exceeded other industrial cyberattacks because it directly interacted with and...
A Totally Tubular Treatise on TRITON and TriStation
Introduction In December 2017, FireEye's Mandiant discussed an incident response involving the TRITON framework. The TRITON attack and many of the publicly discussed ICS intrusions involved routine techniques where the threat actors used only what is necessary to succeed in their mission. For bot...
Programs Controlling ICS Robotics Are ‘Wide Open’ to Vulnerabilities
Most manufacturers have connected their operational technology – including industrial control systems and robotic equipment –to the internet, yet the lack of basic security protocols leave these companies open to cyberattacks. Industrial security company Malcrawler pinpointed these dangers at...
Triton Toolkit SIS Controllers Denial Of Service
TRITON is an attack framework kit built to interact with Triconex SIS controllers. Remote attackers use this framework in order to destroy and shutdown industrial systems...
TRITON Malware Targeting Critical Infrastructure Could Cause Physical Damage
Security researchers have uncovered another nasty piece of malware designed specifically to target industrial control systems ICS with a potential to cause health and life-threatening accidents. Dubbed Triton, also known as Trisis, the ICS malware has been designed to target Triconex Safety...
Attackers Deploy New ICS Attack Framework “TRITON” and Cause Operational Disruption to Critical Infrastructure
Introduction Mandiant recently responded to an incident at a critical infrastructure organization where an attacker deployed malware designed to manipulate industrial safety systems. The targeted systems provided emergency shutdown capability for industrial processes. We assess with moderate...
Design/Logic Flaw
Avaya Fabric Connect Virtual Services Platform VSP Operating System Software VOSS before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames...
CVE-2016-2783
Avaya Fabric Connect Virtual Services Platform VSP Operating System Software VOSS before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames...
Student Information System (SIS) 0.1 - Authentication Bypass
Student Information System SIS 0.1 - Authentication Bypass Exploit Title............... Student Information System SIS Auth Bypass Google Dork................. N/A Date........................ 14/10/2016 Exploit Author.............. lahilote Vendor Homepage...
Student Information System (SIS) 0.1 - Authentication Bypass
Exploit Title............... Student Information System SIS Auth Bypass Google Dork................. N/A Date........................ 14/10/2016 Exploit Author.............. lahilote Vendor Homepage............. http://www.sourcecodester.com/php/10902/student-information-system-sis.html Software...
PT-2016-1797 · Eset · Eset Nod32 Antivirus
Name of the Vulnerable Software and Affected Versions: ESET NOD32 versions before update 11861 Description: The issue is related to a heap-based buffer overflow in the Archive support module. This can be exploited by remote attackers to execute arbitrary code via a large number of languages in an...
SiS / XGI display managers privilege escalation
IOCTL privilege escalation...
SiS Windows VGA Display Manager 6.14.10.3930 Multiple Privilege Escalation
KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Advisory ID: KL-001-2015-003 Publication Date: 2015.09.01 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-003.txt 1...
Focus SIS staticpath File Inclusion (CVE-2007-4807)
A remote file inclusion vulnerability has been reported in Focus SIS. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected systems...
SiS Windows VGA Display Manager 6.14.10.3930 - Write-What-Where PoC
Exploit for windows platform in category dos / poc Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Publication Date: 2015.09.01 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-003.txt 1. Vulnerability Details Affected Vendor: Silicon Integrated...
SiS Windows VGA Display Manager 6.14.10.3930 - Write-What-Where (PoC)
KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Advisory ID: KL-001-2015-003 Publication Date: 2015.09.01 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-003.txt 1...
SiS Windows VGA Display Manager Multiple Privilege Escalation
Vulnerability Details Affected Vendor: Silicon Integrated Systems Corporation Affected Product: Windows VGA Display Manager Affected Version: 6.14.10.3930 Platform: Microsoft Windows 7 x86, Microsoft Windows XP SP3 CWE Classification: CWE-123: Write-what-where condition Impact: Arbitrary Code...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the xorg-x11-drv-sis-0.10.7 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Focus/SIS <= 1.0/2.2 - Remote File Inclusion Vulnerabilities
No description provided by source. Focus/SIS =1.0&2.2 Remote file inclusion Download v1.0 : http://unix.freshmeat.net/redir/focussis/64492/urlzip/Focusv1.0.zip v2.2 : http://www.focus-sis.org/download.php?modfunc=file&version=2.2...
openSUSE Security Update : kernel (openSUSE-SU-2011:0004-1)
The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2010-4347: A local user could inject ACPI code into the kernel via the world-writable 'customdebug' file, allowing local privilege escalation. CVE-2010-4258: A local attack...