FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure Detection

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

Rockwell Automation FactoryTalk ViewPoint - Panel Detection

Rockwell Automation FactoryTalk ViewPoint is a web-based HMI that allows remote monitoring and control of industrial automation systems from a browser. It provides access to FactoryTalk View Machine Edition and Site Edition displays. Exposed instances may allow unauthorised access to industrial...

ScadaBR - Login Panel Detection

ScadaBR is an open-source SCADA system based on Mango Automation, widely used in Brazil and Latin America for industrial monitoring. The "powered by Mango" tagline in the title is a unique identifier. Instances are often internet-facing without authentication controls. !/usr/bin/env python3 --...

Siemens SIMATIC HMI Miniweb - Login Panel Detection

Siemens SIMATIC HMI Miniweb Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Siemens SIMATIC HMI Miniweb Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Siemens...

SEL Real-Time Automation Controller - Login Panel Detection

Schweitzer Engineering Laboratories SEL Real-Time Automation Controller RTAC is a programmable automation controller used in electric utility and industrial automation environments for protection, control, and automation. The web interface exposes a management panel for configuration and...

VulnCheck KEV: CVE-2026-8496

A cross-site scripting XSS vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated SOGo webmail session. The issue occurs because SVG content embedded in the description field of an ICS...

CVE-2026-8312

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:50:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gi7fnva2p 2026-07-25 10:51:50+00:00| seen|...

CVE-2026-61378

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:23+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

CVE-2026-60073

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

WordPress ICS Calendar plugin <= 12.0.9 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Khanh Nguyen - BlueRock in WordPress Plugin ICS Calendar versions = 12.0.9...

CVE-2026-59516 WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through = 12.1.1...

CVE-2026-59516 WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through = 12.1.1...

CVE-2026-59516: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through = 12.1.1...

PT-2026-57786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through = 12.1.1...

EtherNet/IP List Identity

Sends an EtherNet/IP List Identity request UDP/44818 to discover Rockwell, Siemens, and other CIP devices. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from lib.protocols.ics.enipclient import listidentity from...

EtherNet/IP CIP scan

Combines List Identity with TCP CIP Register Session probing !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from lib.protocols.ics.enipclient import scanenipcip from lib.protocols.ics.icsscannerclient import...

Export passive ICS report

Loads a JSON report produced by auxiliary/scanner/ics/passivesniffer and optionally copies it or syncs discovered OT assets to the workspace. !/usr/bin/env python3 -- coding: utf-8 -- import json import os import shutil from kittysploit import from lib.protocols.ics.report import savereport class...

IEC104 single command

Sends an IEC 60870-5-104 single command CSCNA1. Intrusive — otpolicy gated + confirm latch. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from lib.protocols.ics.icsscannerclient import Icsscannerclient from...

TIA Portal project leak

Probes web-exposed Siemens TIA Portal project archives .ap17/.ap18/.zap that may disclose PLC/HMI source projects. !/usr/bin/env python3 -- coding: utf-8 -- import os from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.ics.siemensdefaults import...

ICS Passive Sniffer

Passively discover OT/ICS assets by sniffing traffic with Scapy on a SPAN/TAP interface or by replaying a PCAP. Parses Modbus TCP, S7comm, DNP3, BACnet/IP, and IEC 104; flags write paths and Purdue violations; exports JSON and syncs the workspace. No packets are sent to the network. !/usr/bin/env...