1346 matches found
OneAlert
OneAlert AI Security OS Open-source autonomous cyber defense for industrial networks AI agents that detect, investigate, hunt, and respond to threats across your OT/ICS infrastructure — with human approval gates and full audit trails. Demo Setup · Features · Quick Start · Architecture Try It Now...
OpenJDK 8 <= 8u372 / 11.0.0 <= 11.0.19 / 17.0.0 <= 17.0.7 / 20.0.0 <= 20.0.1 Multiple Vulnerabilities (2023-07-18)
The version of OpenJDK installed on the remote host is 8 prior to or at 8u372 / 11.0.0 prior to or at 11.0.20 / 17.0.0 prior to or at 17.0.8 / 20.0.0 prior to or at 20.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-07-18 advisory. Please Note: Java CVEs do n...
MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices
In an industrial network, malicious activity can be hard to tell apart from normal data exchange between devices. Malicious actors routinely rely on legitimate tools and the Living-off-the-Land technique, so a single network connection may show no known signs of an attack: the device uses a...
CVE-2025-41646---Critical-Authentication-Bypass-
CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Critical Authentication bypass 🔓 CVE-2025-41646 - RevPi WebStatus Authentication Bypass PoC A critical authentication bypass vulnerability CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 allows an attacker to log in as admin without val...
AntiWeb_testing-Suite
ICS/OT AntiWeb: Testing Suite Introduction A vulnerability has been found in ICS/OT-associated web applications running on Anti-Web servers up to version 3.8.7. The vulnerabilities that have been identified affect several well-known manufacturers in the industrial process automation and...
boa-detector
boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...
CVE-2023-26866
CVE-2023-26866 Description GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete...
CVE-2026-7005
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
CVE-2026-7005 WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
EUVD-2026-114362
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
fengarde
FENGARDE Logs in. Evidence out. Open-source security pipeline for IT, AI and OT: raw logs to a verified incident and a draft NIS2 notification. Project page and live demo · Quickstart · Console · Architecture · Status SSOT Badges reflect the latest real run on main, not a promise. Scorecard's...
WIT SynApps Runtime input validation error vulnerability
WIT SynApps Runtime versions 1.4.11 and earlier contain an input validation error vulnerability. This vulnerability stems from a cross-domain request forgery attack facilitated by a browser. Attackers can supply arbitrary target addresses during the controller registration process, causing the...
PT-2026-134133
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
CVE-2026-7005: WIT SynApps Runtime: WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows…
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
Rail-OT-Protector
⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner Former repo| New location ---|--- Energy-Grid-Protector|...
Adaptive Dynamic Security for Operational Technology against AI-Powered Attacks
Operational technology now faces attackers whose tempo is set by AI. We present ADS-OT, an adaptive dynamic security framework modelling defensive posture as a partially observable decision problem. A reinforcement-learning policy adapts monitoring, access, deception, and segmentation under a...
PLANET WGS-804HPT and WGS-4215 Missing Authentication for Critical Function (CVE-2025-46275)
PLANET WGS-804HPT V2 and WGS-4215-8P2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
CLSA-2026-1792440965 harfbuzz: Fix of CVE-2023-25193
CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hh...
Astra Linux – vulnerability in harfbuzz
An integer overflow in the component hb-ot-shape-fallback.cc within Harfbuzz v4.3.0 enables attackers to trigger a Denial of Service DoS attack via unspecified vectors...