201 matches found
CVE-2023-47616
creationtimestamp| type| source ---|---|--- 2024-05-13 19:01:51+00:00| published-proof-of-concept| https://t.me/truesecator/5723 2024-05-14 07:38:24+00:00| published-proof-of-concept| https://t.me/itsecnews/4408 2025-04-10 10:00:00+00:00| seen|...
Westermo Lynx 206-F2G Cleartext Transmission of Sensitive Information (CVE-2023-40544)
An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitive information exchanged via TCP communications. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Westermo Lynx 206-F2G Improper Neutralization of Input During Web Page Generation (CVE-2023-40143)
An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the 'forward.0.domain' parameter. This plugin only works with Tenable.ot. Please visit...
Westermo Lynx 206-F2G Improper Neutralization of Input During Web Page Generation (CVE-2023-45227)
An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the 'dns.0.server' parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
CVE-2024-22017
creationtimestamp| type| source ---|---|--- 2024-03-19 06:26:47+00:00| seen| https://t.me/ctinow/211179 2024-03-19 06:26:54+00:00| seen| https://t.me/ctinow/211183 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08 2025-04-30 23:14:47+00:00| seen|...
CVE-2022-44729
creationtimestamp| type| source ---|---|--- 2024-02-08 18:17:11+00:00| seen| https://t.me/ctinow/181518 2024-02-09 08:51:16+00:00| seen| https://t.me/ctinow/181874 2024-02-09 12:21:18+00:00| seen| https://t.me/ctinow/181981 2024-02-09 15:26:53+00:00| seen| https://t.me/ctinow/182065 2025-09-18...
CVE-2023-48795
creationtimestamp| type| source ---|---|--- 2023-12-18 15:14:35+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-45x7-px36-x8w8 2023-12-18 16:16:12+00:00| published-proof-of-concept| https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj5...
INEA ME RTU Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-35762)
Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system OS command injection, which could allow remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...
CVE-2023-45143
creationtimestamp| type| source ---|---|--- 2023-10-12 20:23:29+00:00| seen| https://t.me/cibsecurity/72190 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08...
CVE-2022-47069
creationtimestamp| type| source ---|---|--- 2023-08-22 22:18:19+00:00| seen| https://t.me/cibsecurity/68972 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09...
Moxa EDR-G903 series Hard-coded Credentials (CVE-2012-4712)
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Exploit for Improper Privilege Management in Deltaww Infrasuite_Device_Master
CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronic...
Rockwell ArmorStart Improper Input Validation (CVE-2023-29026)
A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...
CVE-2022-47386
creationtimestamp| type| source ---|---|--- 2023-05-15 14:29:48+00:00| seen| https://t.me/cibsecurity/64099 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...
Siemens SIMATIC CP 44x-1 RNA Uncontrolled Resource Consumption (CVE-2022-27640)
A vulnerability has been identified in SIMATIC CP 442-1 RNA All versions V1.5.18, SIMATIC CP 443-1 RNA All versions V1.5.18. The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming...
Siemens Industrial Products Intel CPUs Missing Encryption of Sensitive Data (CVE-2020-12357)
Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...
CVE-2023-26293
creationtimestamp| type| source ---|---|--- 2023-04-11 14:23:15+00:00| seen| https://t.me/cibsecurity/61837 2025-11-20 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-05...
CVE-2019-9641
creationtimestamp| type| source ---|---|--- 2023-04-05 04:57:33+00:00| published-proof-of-concept| https://t.me/criticalbug/214 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02 2026-09-01 20:02:51+00:00| seen|...
CVE-2023-0465
creationtimestamp| type| source ---|---|--- 2023-03-29 01:02:07+00:00| seen| https://t.me/cibsecurity/60893 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09 2025-02-18 23:42:22+00:00| seen| Telegram/pjdwdYoav9YZ4blZF6JhNO-J8iKmOiioYUjwlrspoXZ2Y1zQ...
CVE-2022-4224
creationtimestamp| type| source ---|---|--- 2023-03-23 15:51:41+00:00| seen| https://t.me/cibsecurity/60562 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...