CVE-2016-2287: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

XZERES 442SR Wind Turbine 弱口令漏洞

No description provided by source...

XZERES 442SR Wind Turbine CSRF漏洞

No description provided by source...

wind-works.org XSS vulnerability

Vulnerable URL: http://www.wind-works.org/cms/index.php?id=41 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1150910 Google Pagerank| 5 VIP website status:| No Check wind-works.org...

XZERES 442SR Wind Turbine Remote Detection

Detects the installed version of XZERES 442SR Wind Turbine. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

XZERES 442SR Wind Turbine Web Interface XSS Vulnerability (Dec 2015) - Active Check

XZERES 442SR Wind Turbine Web Interface is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

XZERES 442SR Wind Turbine Cross Site Scripting

XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability AFFECTED PRODUCTS XZERES is a US-based energy company that maintains offices in several countries around the world, including the UK, Italy, Japan, Vietnam, Philippines, and Myanmar. The affected product, 442SR Wind Turbine, has a...

Nordex Control 2 (NC2) SCADA 16 Cross Site Scripting

Nordex NC2 XSS Vulnerability AFFECTED PRODUCTS Nordex Control 2 NC2 SCADA V16 and prior versions. Nordex is a company based in Germany that maintains offices in countries around the world. The affected product, Nordex Control 2, is a web-based SCADA system for wind power plants. According to...

Wind River VxWorks Integer Overflow Vulnerability (CNVD-2015-08443)

Wind River VxWorks A suite of real-time operating systems for the Internet of Things. An integer overflow vulnerability exists in Wind River VxWorks, which could be exploited by a remote attacker to submit a specific request to crash an application or execute arbitrary code...

XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-342-01B XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability that was published March 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update C Part 1 of 2 -------- Independent researchers Karn...

CVE-2008-2476

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

Multiple Cross-Site Scripting Vulnerabilities in Nordex NC2

Nordex Control 2 is a web-based SCADA system for wind power stations. Multiple cross-site scripting vulnerabilities exist in the Nordex Control 2 NC2 SCADA 16 and earlier versions, Wind Farm Portal application. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTM...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Wind Farm Portal application in Nordex Control 2 NC2 SCADA 16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-6477

Multiple cross-site scripting XSS vulnerabilities in the Wind Farm Portal application in Nordex Control 2 NC2 SCADA 16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-6477

Multiple cross-site scripting XSS vulnerabilities in the Wind Farm Portal application in Nordex Control 2 NC2 SCADA 16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-7264

Name of the Vulnerable Software and Affected Versions Nordex Control 2 NC2 SCADA versions 16 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Wind Farm Portal application. These vulnerabilities allow remote attackers to inject arbitrary web scrip...

CVE-2015-6477: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Wind Farm Portal application in Nordex Control 2 NC2 SCADA 16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Wind River VxWorks Integer Overflow Vulnerability

VxWorks is a real-time operating system widely used on ICS-related devices. An integer overflow vulnerability exists in the implementation of Wind River VxWorks versions 5.5-6.9.4.1. Successful exploitation could allow an attacker to remotely execute arbitrary code in the operating system, corrup...

XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-342-01B XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability that was published March 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update C Part 1 of 2 -------- Independent researchers Karn...

CVE-2015-3963

Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnetcoreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number ISN values, which...