CVE-2024-25274: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file...

PT-2024-20854 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus version 4.3.0-RC1 Description: The issue is related to an arbitrary file upload vulnerability in the component /sysFile/upload. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

3s-smart Software Solutions CODESYS Control Operating System Command Injection Vulnerability

3s-smart Software Solutions CODESYS Control is a suite of industrial control program programming software from 3s-smart Software Solutions, Germany. An operating system command injection vulnerability exists in 3s-smart Software Solutions CODESYS Control versions prior to 4.11.0.0. The...

CVE-2023-1607

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1607: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

novel-plus SQL注入漏洞

novel-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system. A security vulnerability exists in novel-plus version 3.6.2, which stems from a problem in the file /common/sysFile/list, where the operation of the parameter sort can lead to sql injection...

Enlightenment sysfile Privilege Escalation

The vulnerability of the Enlightenment sysytem file for the Enlightenment window manager is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to increase their privileges...

CODESYS Control V2 Linux SysFile Data Compromise

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists because measures to neutralize special elements used in operating system commands have not been implemented. Exploiting this vulnerability can allow attackers to compromise the confidentialit...

CODESYS Control V2 Linux SysFile DoS

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CODESYS Control V2 Linux SysFile DoS

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

CODESYS Control V2 Linux SysFile Data Compromise

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CODESYS Control V2 Linux SysFile library

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS V2 Runtime Toolkit Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability may allow the control programmer to call...

3S-Smart Software Solutions CODESYS Control runtime system 操作系统命令注入漏洞

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. An operating system command injection vulnerability exists in the 3S-Smart...

PT-2021-3344

Name of the Vulnerable Software and Affected Versions CODESYS V2 runtime system versions prior to 2.4.7.55 Description The issue exists due to the reading of data beyond the boundaries of a specified buffer in the CODESYS Control V2 Linux SysFile library of the CODESYS industrial automation...