1914 matches found
XPhysICS: Cross-Physical-Domain Threat Grounding for Industrial Control Systems Security
Industrial control system ICS threats documented for one plant can express cyber-physical effects relevant to another, but semantic similarity alone does not establish whether those effects are structurally admissible or evaluable on a target. We present XPhysICS, a provenance-aware,...
CVE-2026-88761
creationtimestamp| type| source ---|---|--- 2026-09-24 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01...
CVE-2026-82585
creationtimestamp| type| source ---|---|--- 2026-09-24 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01...
CVE-2026-91024 Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)
The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iCalendar feed before using them in a SQL query, allowing authenticated users with Author-level access and above to perform SQL injection attacks by importing a feed they control...
CVE-2026-91024
The Booking Manager WordPress plugin (versions before 2.1.21 ) is vulnerable to SQL injection due to improper neutralization of special elements. The root cause is the failure to sanitize and escape values retrieved from a fetched external iCalendar feed before incorporating them into a SQL query...
conpot v1.0.0
Conpot About Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. Documentation The documentation can be found here. If you are just checking out conpot, we suggest that you go for quick install. If you...
CVE-2026-34492
creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1436 2026-09-20 00:00:10+00:00| seen| https://t.me/icscert/1436...
CVE-2026-64887
creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1436 2026-09-20 00:00:07+00:00| seen| https://t.me/icscert/1436...
CVE-2026-57263
creationtimestamp| type| source ---|---|--- 2026-09-18 20:00:04+00:00| seen| https://t.me/icscert/1432 2026-09-19 00:00:11+00:00| seen| https://t.me/icscert/1432...
Bransys ELD
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow unauthorized access to telemetry data and firmware. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for...
CVE-2026-85497
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08 2026-09-18 17:57:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5i5k6nkfyou4h 2026-09-18 18:09:06+00:00| seen|...
CVE-2026-85478
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...
CVE-2026-81305
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:28+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...
CVE-2026-84400
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:26+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...
CVE-2026-84398
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:24+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...
CVE-2026-88259
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:22+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...
CVE-2026-62654
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:20+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05...
CVE-2026-62653
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:18+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05...