CVE-2018-18391

User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18392

Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18393

Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18394

Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18395

Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18390

User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18392

CVE-2018-18392 describes a privilege escalation due to broken access control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions, version 2.1. Affected component is the ThingsPro product suite; the root cause is improper access control allowing elevation of privileges. Impact ...

CVE-2018-18394

CVE-2018-18394 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions v2.1, where the system stores sensitive information in plaintext (notably tokens). The provided sources (NVD, CNVD, PRION) describe the root cause as plaintext storage, enabling an attacker to recover acce...

CVE-2018-18396

The CVE-2018-18396 entry concerns Moxa ThingsPro IIoT Gateway and Device Management Software Solutions, version 2.1. Multiple connected sources (CNVD-2018-21513, NVD, and related records) authorize a Remote Code Execution vulnerability in this product. The root cause is an ability for a remote at...

CVE-2018-18391

CVE-2018-18391 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. The connected documents describe a user privilege escalation vulnerability in ThingsPro, but do not specify the underlying root cause, affected components, or concrete exploitation details. Pu...

CVE-2018-18390

CVE-2018-18390 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Connected sources describe a user enumeration vulnerability over the network, with CNVD noting a remote attacker could use brute-force attempts to obtain a valid user password. The CVSS metric...

CVE-2018-18395

CVE-2018-18395 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions v2.1. A vulnerability described as Hidden Token Access exists, with CNVD reporting that a remote attacker could gain root privileges and execute arbitrary code via a hidden API token. The CVE’s CVSS scores...

How to restrict users to access device settings on Samsung devices in KIOSK mode

Restrict users to access device settings in Samsung KIOSK mode...

Remote code execution

An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web serv...

CVE-2017-6025

A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overfl...

CVE-2017-6027

An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web serv...

Baby FTP server denial of service vulnerability (CNVD-2016-10479)

Baby FTP Server is a free FTP server software from Pablo Software Solutions. The software features support for RFC959 FTP commands, PASV and non-PASV connection modes, multi-threading, real-time server logs and more. Baby FTP server version 1.24 has denial-of-service vulnerabilities that stem fro...

Beta Software Solutions Admin Bypass Vulnerability

Exploit for php platform in category web applications Title : Beta Software Solutions Admin Bypass Exploit By LuXas Dork : "Site internet réalisé par Sorecson Agence internet à Lyon" admin Panel; /admin/ Username : '=' 'or' Password : '=' 'or' Demo http://www.defim-lyon.fr/admin/...

3S CODESYS Runtime Toolkit Null Pointer Dereference Vulnerability

OVERVIEW Nicholas Miles of Tenable Network Security has identified a NULL pointer dereference vulnerability in 3S-Smart Software Solutions GmbH’s CODESYS Runtime Toolkit. 3S has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCT...

Pablo Software Solutions FTP Service 1.2 Plaintext Password Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7801/info It has been reported that Pablo FTP Service stores FTP User account passwords in plaintext format. As a result, these credentials could be exposed to other users. It should be noted that while this weakness has...