291 matches found
randy
Randy Cosa Questo è un exploit RCE pre-autenticato per Inductive Automation Ignition che impatta le versioni = 8.1.16. Non siamo riusciti a sfruttare i bug al Pwn2Own Miami 2022 perché avevamo un exploit approssimativo e nessun ambiente di debug, ma da allora abbiamo trovato il tempo e l'energia...
Exploits_and_Advisories
Exploit e Advisory Repository che traccia exploit, vulnerabilità e advisory pubblici che ho co-scoperto o co-redatto. CVE CVE| ID| Bersaglio| Descrizione| Divulgazione ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| overflow dello stack DNS| Pwn2Own Tokyo 2019 CVE-2020-10882...
PT-2026-25038
Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition affected versions not specified Description An Ignition user importing a specially crafted external file can lead to the execution of embedded malicious code during deserialization. This can occur intentionally or...
Inductive Automation Ignition 代码问题漏洞
Inductive Automation Ignition is an integrated software platform developed by Inductive Automation in the United States, designed for SCADA systems. This platform supports SCADA Supervisory Control and Data Acquisition and HMI Human Machine Interface applications. Inductive Automation Ignition ha...
CVE-2022-35869
This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 b2022030114. Authentication is not required to exploit this vulnerability. The specific flaw exists within com.inductiveautomation.ignition.gateway.web.pages. The...
CVE-2022-35871
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 b2022030114. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authenticateAdSso method. The issue results from th...
CVE-2025-13911
CVE-2025-13911 affects Inductive Automation Ignition SCADA, where Python scripting is used for automation. The root cause is insufficient controls on which Python libraries can be imported/executed within the scripting environment, paired with an Ignition service account that has system-level Win...
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
CISA Releases Nine Industrial Control Systems Advisories
CISA released nine Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-352-01 Inductive Automation Ignition ICSA-25-352-02 Schneider Electric EcoStruxure Foxboro DCS Advisor...
Inductive Automation Ignition (Update A)
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to be granted direct SYSTEM-level code execution on the host operating system running the Ignition Gateway service on Windows systems. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...
Inductive Automation Ignition 安全漏洞
Inductive Automation Ignition is an integrated software platform for SCADA systems from Inductive Automation, USA. The platform supports SCADA Data Acquisition and Monitoring Systems, HMI Human Machine Interface and more. A security vulnerability exists in Inductive Automation Ignition that stems...
EUVD-2015-1000
Malware in sbrugna...
EUVD-2015-0984
Malware in sbrugna...
EUVD-2015-1002
Malware in sbrugna...
EUVD-2015-1003
Malware in sbrugna...
EUVD-2015-1001
Malware in sbrugna...
EUVD-2023-55043
Malicious code in bioql PyPI...
EUVD-2023-43199
Malicious code in bioql PyPI...