CVE-2015-9272: Improper Control of Generation of Code

The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code...

PT-2018-4581

Name of the Vulnerable Software and Affected Versions videowhisper-video-presentation plugin version 3.31.17 Description The issue allows remote attackers to execute arbitrary code. This is because the vp/vw upload.php file considers a file safe when it ends with "html", as demonstrated by a .pht...

CVE-2018-8838

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

CVE-2018-8838

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

CVE-2018-8838

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

CVE-2018-8838

The CVE-2018-8838 issue is a local-privilege vulnerability in Yokogawa CENTUM and Exaopc components (CENTUM CS 1000; CENTUM CS 3000/Small; CENTUM VP family; Exaopc; B/M9000 CS/VP) where inadequate access controls on the message management function may enable a local attacker to manipulate alarms ...

CVE-2018-8838: Undefined Security Weakness

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

PT-2018-3763

Name of the Vulnerable Software and Affected Versions CENTUM CS 1000 all versions CENTUM CS 3000 versions R3.09.50 and earlier CENTUM CS 3000 Small versions R3.09.50 and earlier CENTUM VP versions R6.03.10 and earlier CENTUM VP Small versions R6.03.10 and earlier CENTUM VP Basic versions R6.03.10...

Yokogawa CENTUM and Exaopc Elevation of Privilege Vulnerability

CENTUM CS 3000 and CENTUM VP are Yokogawa motor products that are Windows-based control systems. These products are used in multiple industries, including critical manufacturing, energy, food and agriculture. An elevation of privilege vulnerability exists in Yokogawa CENTUM and Exaopc, which can ...

Joomla VP Conversion Tracking 1.7 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: VP Conversion Tracking Plugin - SQL Injection Vulnerability Google Dork: N/A Date: 02.01.2018 Author: Abde Ouabala @AbdeOuabala url : https://www.virtueplanet.com/extensions/vp-conversion-tracking Version : 1.7 Tested on: BackBo...

Hancom Hangul HCell CSSValFormat::CheckUnderbar Code Execution Vulnerability(CVE-2016-4296)

Description This vulnerability was discovered within the Hangul Hcell application which is part of the Hangul Office Suite. Hangul Office is published by Hancom, Inc. and is considered one of the more popular Office suites used within South Korea. When opening a Hangul Hcell Document .cell and...

PT-2017-8946

Name of the Vulnerable Software and Affected Versions SAP Business One for Android version 1.2.3 Description The issue allows remote attackers to conduct XML External Entity XXE attacks. This is achieved by sending crafted XML data in a request to the "B1iXcellerator/exec/soap/vP.001sap0003.in...

Heap overflow

Multiple heap-based buffer overflows in the 1 CBookBase::SetDefTableStyle and 2 CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document .cell file...

CVE-2016-4293

Multiple heap-based buffer overflows in the 1 CBookBase::SetDefTableStyle and 2 CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document .cell file...

CVE-2016-4293

The CVE-2016-4293 vulnerability affects Hancom Office 2014 VP. It occurs in Hangul Hcell documents when parsing 0x088e records in the Workbook stream: the 0x088e structure exposes table_style_length and pivot_style_length fields (at offsets 0x10 and 0x12) that are used to copy strings into the CB...

CVE-2016-4293: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in the 1 CBookBase::SetDefTableStyle and 2 CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document .cell file...

PT-2017-8460

Name of the Vulnerable Software and Affected Versions Hancom Office 2014 VP Description The issue is related to multiple heap-based buffer overflows in the CBookBase::SetDefTableStyle and CBookBase::SetDefPivotStyle functions. This can be exploited by remote attackers to execute arbitrary code vi...

Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06357)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06352)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

Robert Flores Named Vice President of IT

Coalfire welcomes Robert Flores as the newest addition to the cybersecurity risk management and compliance service leaders leadership team as its Vice President of Information Technology. Flores has a proven track record of driving strategy for high-growth IT companies while managing billion-doll...