T-Soft E-Commerce 4 Cross Site Scripting

Exploit Title: T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting XSS Exploit Author: Alperen Ergel alpernae IG/TW Web Site: https://alperenae.gitbook.io/ Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A Date: 2022-05-10 CV...

T-Soft E-Commerce 4 SQL Injection

Exploit Title: T-Soft E-Commerce 4 - SQLi Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE: 2022-28132 Date: 18.02.2022 Description Step-1: Login as Admin or...

T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS)

Exploit Title: T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting XSS Exploit Author: Alperen Ergel alpernae IG/TW Web Site: https://alperenae.gitbook.io/ Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A Date: 2022-05-10 CV...

Vulnerability in SICK Flexi Soft Designer & Safety Designer

A deserialization vulnerability in a .NET framework class used by both SICK Flexi Soft Designer and SICK Safety Designer allows an attacker to create malicious project files...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-006 (ALASKERNEL-5.4-2022-006)

The version of kernel installed on the remote host is prior to 5.4.141-67.229. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-006 advisory. A flaw was found in the Linux kernel. This flaw allows attackers to cause a denial of service soft lockup b...

CVE-2022-1403

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...

CVE-2022-1402

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2022-1402

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2022-1403

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...

Design/Logic Flaw

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...

Design/Logic Flaw

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2022-1403 Delta Electronics ASDA-Soft Out-of-bounds Write

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...

CVE-2022-1403

Delta Electronics ASDA-Soft (Version 5.4.1.0 and prior) is affected by CVE-2022-1403 due to improper input sanitization when processing a specific project file, allowing an out-of-bounds write. ZDI reports this can lead to remote code execution, requiring user interaction (the user must open a ma...

CVE-2022-1403 Delta Electronics ASDA-Soft Out-of-bounds Write

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...

CVE-2022-1402 Delta Electronics ASDA-Soft Out-of-bounds Read

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2022-1402 Delta Electronics ASDA-Soft Out-of-bounds Read

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2022-1402

Summary (CVE-2022-1402): Delta Electronics ASDA-Soft (version 5.4.1.0 and earlier) is affected by an out-of-bounds read vulnerability in SCP file parsing, caused by improper input sanitization of a specific project file. Public sources concur on potential impact, including out-of-bounds read; som...

Vulnerability in SICK Gateways for Flexi Soft, Flexi Compact, SICK EFI Gateway UE4740, SICK microScan3 and outdoorScan3

The PSIRT received a report about a vulnerability in some gateways for Flexi Soft, Flexi Compact, EFI gateway UE4740, microScan3 and the outdoorScan3. The vulnerability is classified as a denial-of-service vulnerability and results from a malformed UDP package. It is recommended to implement the...

Vulnerability in SICK Flexi Soft PROFINET IO Gateway FX0-GPNT and SICK microScan3 PROFINET

The PSIRT received a report about a vulnerability in the Gateway Flexi Soft and microScan3 PROFINET. The vulnerability is classified as a denial-of-service vulnerability and results form a mishandling of Read Implicit Request services...

CVE-2022-1403: Out-of-bounds Write

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...