1914 matches found
Modbus map registers
Maps Modbus holding/input registers or coils/discrete inputs via an active session !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.icssessionmixin import ModbusSessionMixin class ModulePost, ModbusSessionMixin: info = "name": "Modbus map registers",...
OPC UA anonymous access
Checks whether an OPC UA server allows anonymous browsing on port 4840 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from lib.protocols.ics.icsscannerclient import Icsscannerclient from lib.protocols.ics.opcuaclient impo...
IEC 61850 MMS Identify
Probe TCP/102 for IEC 61850 MMS COTP + initiate and distinguish from Siemens S7comm on the same port. !/usr/bin/env python3 -- coding: utf-8 -- """Detect IEC 61850 MMS servers on ISO-on-TCP port 102.""" from future import annotations import json from kittysploit import from...
S7comm session acquire
Opens an authenticated S7comm session to a Siemens PLC and registers it in the framework session list for follow-on OT modules. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from core.framework.basemodule import ModuleResult from lib.protocols.ics.constants import...
Modbus write coil
Writes a single Modbus coil FC5 via an active Modbus session !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.icssessionmixin import ModbusSessionMixin class ModulePost, ModbusSessionMixin: info = "name": "Modbus write coil", "description": "Writes a single...
ICS engagement report
Builds a consolidated OT/ICS engagement report from passive JSON, workspace services, and optional active findings. Exports JSON and HTML. !/usr/bin/env python3 -- coding: utf-8 -- import json import os from kittysploit import from lib.protocols.ics.report import buildengagementreport, savereport...
BACnet Device Inventory
Discover BACnet/IP devices and perform read-only object inventory requests via ReadProperty. !/usr/bin/env python3 -- coding: utf-8 -- """Read-only BACnet device inventory via Who-Is and ReadProperty.""" from kittysploit import from lib.protocols.ics.bacnetclient import objectinventory, whois fro...
Modbus session acquire
Opens a Modbus TCP session and registers it in the framework session list for follow-on OT modules and the Modbus shell. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from core.framework.basemodule import ModuleResult from lib.protocols.ics.constants import ICSPROTOCOLPORTS fr...
CVE-2026-9838
The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
EUVD-2026-42852
The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
CVE-2026-9838 ICS Calendar <= 12.0.9 - Reflected Cross-Site Scripting via 'htmltagtitle' Parameter
The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
CVE-2026-9838: Improper Neutralization of Input During Web Page Generation
The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
USN-8504-1: SOGo vulnerabilities
It was discovered that SOGo did not properly sanitize categories used for events, tasks, and contacts. A remote authenticated attacker could possibly use this issue to perform cross-site scripting attacks. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu...
CVE-2026-56415
creationtimestamp| type| source ---|---|--- 2026-07-01 02:26:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhptlyfo2i 2026-07-01 02:36:58+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 22:03:22+00:00| seen|...
CVE-2026-12578
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:41+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-06 2026-06-30 10:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirdnqj2d2f 2026-08-28 13:00:05+00:00| seen|...
CVE-2026-44622
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02 2026-06-25 22:01:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gkqc4w42u...
PT-2026-52218
Name of the Vulnerable Software and Affected Versions icalendar versions 7.1.0 through 7.1.2 Description The software contains a flaw in the Component equality method within src/icalendar/cal/component.py that leads to exponential time complexity O2^n relative to nesting depth when comparing nest...
CGA-6X6V-CQ37-Q3HP
Bulletin has no description...
CVE-2016-20084: Improper Neutralization of Input During Web Page Generation
WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site scripting payloads through the admin.php page parameters. Attackers can inject malicious JavaScrip...
CVE-2026-50245
creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-03 2026-06-11 16:19:00+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmvvg32p2f 2026-06-11 20:19:51+00:00| seen|...