OneAlert

OneAlert AI Security OS Ciberdefensa autónoma de código abierto para redes industriales Agentes de IA que detectan, investigan, buscan y responden a amenazas en tu infraestructura OT/ICS — con puertas de aprobación humana y registros de auditoría completos. Demo Setup · Características · Inicio...

AntiWeb_testing-Suite

ICS/OT AntiWeb: Testing Suite Introducción Una vulnerabilidad ha sido encontrada en aplicaciones web asociadas a ICS/OT que corren sobre servidores Anti-Web hasta su version 3.8.7. La vulnerabilidades que se han identificado afectan a varios fabricantes de renombre en la industria de la...

Rail-OT-Protector

⚠️ Repositorio Archivado Este repositorio ha sido archivado y ya no se mantiene. Todo el desarrollo continúa en el monorepo unificado ICS OT Protector : https://github.com/spinfosecurity/ics-ot-protector Dónde encontrar este escáner...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Bypass-Crítico-de-Autenticación- CVE-2025-41646 - Bypass crítico de autenticación 🔓 CVE-2025-41646 - RevPi WebStatus Bypass de Autenticación PoC Una vulnerabilidad crítica de bypass de autenticación CVE-2025-41646 en RevPi WebStatus ≤ v2.4.5 permite a un atacante iniciar sesión...

boa-detector

boa-detector Este paquete de Zeek detecta la cadena del servidor web Boa en las cabeceras HTTP. Todas las versiones de Boa se consideran vulnerables: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ Cuando se...

CVE-2023-26866

CVE-2023-26866 Descripción La unidad interior WR-1200 de OH736 de GreenPacket y la OT-235, con las versiones de firmware M-IDU-1.6.0.3V1.1 y MH-46360-2.0.3-R5-GP respectivamente, son vulnerables a inyección remota de comandos. Los comandos se ejecutan mediante ejecución previa al inicio de sesión...

Astra Linux – Vulnerability in Harfbuzz

An integer overflow in the hb-ot-shape-fallback.cc component of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS attack through unspecified vectors...

HP LaserJet Printers Classic Buffer Overflow (CVE-2023-27972)

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

UBUNTU-CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

Xerox Printers Clone File OS Command Injection (CVE-2021-28673)

Xerox Phaser 6510 before 64.61.23 and 64.59.11 Bridge, WorkCentre 6515 before 65.61.23 and 65.59.11 Bridge, VersaLink B400 before 37.61.23 and 37.59.01 Bridge, B405 before 38.61.23 and 38.59.01 Bridge, B600/B610 before 32.61.23 and 32.59.01 Bridge, B605/B615 before 33.61.23 and 33.59.01 Bridge,...

Xerox Printers Remote Command Execution (CVE-2021-28671)

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39826)

In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a roseneigh structure is freed while still being reference...

Siemens SIMATIC S7-1500 CPU 1518 MFP Integer Overflow or Wraparound (CVE-2024-49994)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505830; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Resource Leak (CVE-2025-40300)

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor like QEMU. Existing mitigations already protect kernel/KVM...

CVE-2026-42933: Unintended Proxy or Intermediary

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation...

Cisco ASA/FTD Observable Discrepancy (CVE-2022-20866)

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...

Siemens SIMATIC S7 PLC Web Server Improper Neutralization of Input During Web Page Generation (CVE-2026-25786)

Affected devices do not properly validate and sanitize PLC/station name rendered on the 'communication' parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a...

PT-2026-53221

Name of the Vulnerable Software and Affected Versions Delta Electronics DTM Soft affected versions not specified Description The software is susceptible to the deserialization of untrusted data, which can allow an attacker to execute arbitrary code. Real-world exploitation has been observed where...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the filterToDefinedArgumentsOnly process. An attacker can inject arbitrary unvalidated arguments with the ot prefix, which are then set as environment variables and included in the template context, by...

OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

Description The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, a special case allows any argument whose name starts with ot to bypass this filter. While two system arguments...