CVE-2021-37172

A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants V4.5.0. Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication an...

CVE-2021-37172

The CVE-2021-37172 vulnerability affects the SIMATIC S7-1200 CPU family (including SIPLUS variants) version 4.5.0. It arises from improper authentication when devices are provisioned with TIA Portal V13, allowing an attacker to bypass authentication and download arbitrary programs to the PLC; the...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Host On-Demand

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK and Runtime Environment updates in July 2020. Vulnerability Details CVEID:...

PT-2021-11804 · Tp Link · Tp-Link Tl-Wr841N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841N V13 JP versions prior to 201216 Description: A Command Injection issue in the traceroute feature allows authenticated users to execute arbitrary code as root via shell metacharacters. Recommendations: For versions prior to...

CVE-2020-35576

CVE-2020-35576 is a command-injection vulnerability in the traceroute feature of TP-Link TL-WR841N (V13, JP) firmware prior to 201216. Authenticated users can execute arbitrary code as root via shell metacharacters. Affected firmware versions include V13 with build 161028, and vendor guidance fix...

Security Bulletin: Vulnerability in IBM Java Runtime affects Host On-Demand

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in Oracle April 2020 Critical Patch Update. Vulnerability Detai...

Security Bulletin: Vulnerability in IBM Java Runtime affects Host On-Demand

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in January 2020. Vulnerability Details CVEID: CVE-2019-4732...

Apple iOS v13.x (AirDrop) - (AirDoS) Denial of Service PoC

Document Title: =============== Apple iOS v13.x AirDrop - AirDoS Denial of Service PoC References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2192 Video: https://www.youtube.com/watch?v=pLpJIo-GcbQ Apple Acknowledgements: https://support.apple.com/en-us/HT210785...

Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability

Document Title: =============== Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...

Apple iOS v13.x Webkit - Denial of Service Vulnerability

Document Title: =============== Apple iOS v13.x Webkit - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...

CVE-2018-5403

Imperva SecureSphere gateway GW running v13, for both pre-First Time Login or post-First Time Login FTL, if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface...

CVE-2018-5403

CVE-2018-5403 affects Imperva SecureSphere gateway (GW) running v13. The vulnerability allows remote code execution via specially crafted requests to the web access management interface, applicable for both pre-First Time Login and post-First Time Login (FTL) when an attacker knows the basic auth...

Security feature bypass

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

TP-Link TL-WR841N v13 Authentication Command Injection Vulnerability

The TP-Link TL-WR841N v13 is a wireless router device. An authentication command injection vulnerability exists in the TP-Link TL-WR841N v13 ping and traceroute functions. An authenticated attacker can execute arbitrary commands on the router by sending specific CREST HTTP requests to the router...

Schneider Electric IGSS SCADA Software

CVSS v3 7.0 ATTENTION: Locally exploitable/high skill level to exploit. Vendor: Schneider Electric Equipment: IGSS SCADA Software Vulnerability: Security Misconfiguration AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following IGSS SCADA Software products: IGSS...

Heap overflow

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte...

CVE-2017-11757

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...