PT-2026-107255

Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...

PT-2026-107259

Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...

PT-2026-107256

Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...

CVE-2020-10618

LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users...

EUVD-2018-10694

Malware in sbrugna...

EUVD-2018-10720

Malware in sbrugna...

EUVD-2018-10696

Malware in sbrugna...

EUVD-2018-10690

Malware in sbrugna...

EUVD-2021-19710

Malware in sbrugna...

EUVD-2018-10747

Malware in sbrugna...

EUVD-2018-10718

Malware in sbrugna...

EUVD-2020-3066

Malware in sbrugna...

CVE-2021-32989

When a non-existent resource is requested, the LCDS LAquis SCADA application version 4.3.1.1011 and prior returns error messages which may allow reflected cross-site scripting...

CVE-2020-10622

LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorized users...

CVE-2024-9414 Cross-site Scripting vulnerability in LCDS LAquis SCADA

In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions...

LCDS LAquis SCADA 跨站脚本漏洞

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of devices that have communication technology. A cross-site scripting vulnerability exists in LCDS LAquis SCADA version...

CVE-2024-5040

There are multiple ways in LCDS LAquis SCADA for an attacker to access locations outside of their own directory...

CVE-2024-5040: Improper Limitation of a Pathname to a Restricted Directory

There are multiple ways in LCDS LAquis SCADA for an attacker to access locations outside of their own directory...

CVE-2021-32989

When a non-existent resource is requested, the LCDS LAquis SCADA application version 4.3.1.1011 and prior returns error messages which may allow reflected cross-site scripting...

CVE-2021-32989

The CVE-2021-32989 issue affects LCDS LAquis SCADA (Versions up to 4.3.1.1011). It is a Cross-Site Scripting vulnerability due to improper neutralization of input during web page generation, triggered when a non-existent resource is requested and error messages are returned. This can enable refle...