PT-2019-16600

Name of the Vulnerable Software and Affected Versions Wifi-soft UniBox controller versions 0.x through 2.x Description An issue was discovered that allows for arbitrary file upload through the network/mesh/edit-nds.php endpoint, enabling an attacker to upload .php files and execute code on the...

PT-2019-16602

Name of the Vulnerable Software and Affected Versions Wifi-soft UniBox controller versions 0.x through 2.x Description An issue in the Diagnostic Tools component of the Wifi-soft UniBox controller allows for Remote Command Execution. This is due to the tools/ping Ping feature being vulnerable,...

PT-2019-16601

Name of the Vulnerable Software and Affected Versions Wifi-soft UniBox controller versions 3.x Description A Remote Command Execution issue was discovered in the Diagnostic Tools Controller, allowing an attacker to execute arbitrary system commands on the server with root user privileges. The...

CVE-2019-3497: Use of Hard-coded Credentials

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping Ping feature of the Diagnostic Tools component is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user privileges. Authenticatio...

CVE-2019-3496: Use of Hard-coded Credentials

An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller/diagnostictoolscontroller Diagnostic Tools Controller is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user privileges. Authenticati...

CVE-2019-3495: Unrestricted Upload of File with Dangerous Type

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this component can be...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

How to pin Citrix Hypervisor Virtual CPUs to specific Physical CPUs

Citrix Hypervisor maps vCPUs to pCPUs by default in a semi-even way to distribute VM load on the host. In some cases it may be needed to have a specific mapping, for example, if some VMs will be CPU intensive while other wont, the intensive VMs can be mapped to exclusive physical CPUs while the...

Schneider Electric Zelio Soft Resource Management Error Vulnerability

Schneider Electric Zelio Soft is a set of logic controller programming software from the French company Schneider Electric Schneider Electric. A resource management error vulnerability exists in Schneider Electric Zelio Soft. The vulnerability can be exploited to execute code via specially crafte...

CVE-2018-7817

A Use After Free CWE-416 vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file...

CVE-2018-7817

A Use After Free CWE-416 vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file...

Design/Logic Flaw

A Use After Free CWE-416 vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file...

CVE-2018-7817

Schneider Electric Zelio Soft 2 is affected by CVE-2018-7817 (CWE-416). A Use-After-Free in the ZM2/ Zelio Soft project file parsing affects Zelio Soft 2 versions 5.1 and earlier. The issue can lead to remote code execution when opening a specially crafted Zelio Soft project file; attacker intera...

CVE-2018-7817

A Use After Free CWE-416 vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file...

CVE-2018-7817: Use After Free

A Use After Free CWE-416 vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS attacks. The vulnerability exists as the tcpspliceread function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service infinite loop and soft lockup via vectors involving a TCP packet with the URG flag...

CVE-2019-6289

uploads/include/dialog/selectsoft.php in DedeCMS V57UTF8SP2 allows remote attackers to execute arbitrary PHP code by uploading with a safe file extension and then renaming with a mixed-case variation of the .php extension, as demonstrated by the 1.pHP filename...

DedeCMS Arbitrary PHP Code Execution Vulnerability (CNVD-2019-04908)

Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A security vulnerability exists in...

Schneider Electric Zelio Soft 2 Detection (Windows SMB Login)

SMB login-based detection of Schneider Electric Zelio Soft 2. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc";...

Wifi-soft's Unibox Controllers Remote Code Injection Vulnerability

Wifi-soft's Unibox Controllers are fast-paced network controllers for all large and small venues. A remote code injection vulnerability exists in Wifi-soft's Unibox Controllers. An attacker can exploit the vulnerability to inject arbitrary code...