CVE-2017-6035

A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in denial of service when a malicious project file is run on the system...

CVE-2017-6037

A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow when a maliciously crafted project file is run by the system...

PT-2017-16851

Name of the Vulnerable Software and Affected Versions Wecon Technologies LEVI Studio HMI Editor versions prior to 1.8.1 Description A Heap-Based Buffer Overflow issue was discovered, causing a buffer overflow when a maliciously crafted project file is run by the system. Recommendations For versio...

CVE-2017-6037: Heap-based Buffer Overflow

A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow when a maliciously crafted project file is run by the system...

CVE-2017-6035

A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in denial of service when a malicious project file is run on the system...

CVE-2017-6037

CVE-2017-6037 affects Wecon Technologies LEVI Studio HMI Editor (pre-1.8.1). A heap-based buffer overflow occurs when running a maliciously crafted project file, with CVSS v3 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Related CNVD/NVD entries corroborate a similar vulnerability; ICS-CE...

CVE-2017-6035: Stack-based Buffer Overflow

A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in denial of service when a malicious project file is run on the system...

PT-2017-16849

Name of the Vulnerable Software and Affected Versions Wecon Technologies LEVI Studio HMI Editor versions prior to 1.8.1 Description A Stack-Based Buffer Overflow issue was discovered, causing a buffer overflow that could result in denial of service when a malicious project file is run on the...

CVE-2017-6037

A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow when a maliciously crafted project file is run by the system...

CVE-2017-6035

The CVE-2017-6035 issue affects Wecon Technologies LEVI Studio HMI Editor prior to 1.8.1, where a STACK-BASED BUFFER OVERFLOW in processing a project file can cause a denial of service when a malicious project is opened. Connected sources confirm the affected product and root cause, and ICS-CERT ...

PT-2018-10: Server-Side Request Forgery in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected a Server-Side Request Forgery vulnerability in Ipswitch WhatsUp Gold. A server-side request forgery vulnerability in NmAPI.exe in Ipswitch WhatsUp Gold allows attackers to gain unauthorized access to the WhatsUp Gold system, obtain...

Wecon Technologies LEVI Studio HMI Editor Buffer Overflow Vulnerability

WECON products are widely used in machinery and equipment, metallurgy, chemical industry, petroleum and other industries. A buffer overflow vulnerability exists in the Wecon Technologies LEVI Studio HMI Editor. An attacker can exploit the vulnerability to execute arbitrary code in the context of ...

XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal

uc-httpd is an HTTP daemon used by a wide array of IoT devices and is vulnerable to local file inclusion and directory traversal bugs. +---------------------------------------------------------+ | Vulnerable Software: uc-httpd | | Vendor: XiongMai Technologies | | Vulnerability Type: LFI, Directo...

Wecon Technologies LEVI Studio HMI Editor

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Wecon Technologies Equipment: LEVI Studio HMI Editor Vulnerabilities: Heap-Based Buffer Overflow, Stack-Based Buffer Overflow AFFECTED PRODUCTS The following versions of LEVI Studio HMI Editor, a HMI programming...

IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven

A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...

Android Variant of Notorious Pegasus Spyware Found

Researchers say a variant of the notorious surveillance software called Pegasus has been found targeting Android users, allowing third parties to take screenshots, capture audio, read email and exfiltrate data from targeted phones. The malware, called Chrysaor, was discovered through a joint effo...

dynamic-technologies-group.com XSS vulnerability

Vulnerable URL: http://dynamic-technologies-group.com/page.php?pagina=91"alert/OPENBUGBOUNTY/...

PT-2017-09: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. A cleartext transmission of information vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH100...

PT-2018-39: Cross-Site Scripting in SAP Business Warehouse Universal Data Integration

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP Business Warehouse Universal Data Integration. A cross-site scripting XSS vulnerability in SAP Business Warehouse Universal Data Integration, due to insufficient encoding of user input, allow...

PT-2018-41: Server-Side Request Forgery in SAP NetWeaver Knowledge Management Configuration Service

The specialists of the Positive Research center have detected a Server-Side Request Forgery vulnerability in SAP NetWeaver Knowledge Management Configuration Service. A server-side request forgery SSRF vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 allow...