4118 matches found
PT-2025-41279
Уязвимость SCADA-системы «ЭНТЕК» связана с недостаточной обработкой исключений. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании REST API сервиса...
PT-2025-41278
Уязвимость SCADA-системы «ЭНТЕК» связана с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить атаку методом «грубой силы» brute force...
PT-2025-41281
Уязвимость SCADA-системы «ЭНТЕК» связана с недостаточной проверкой пользовательского ввода. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, манипулировать входными данными для доступа к файлам за пределами директории...
PT-2025-41280
Уязвимость SCADA-системы «ЭНТЕК» связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...
CVE-2025-4216
The DIOT SCADA with MQTT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'diot' shortcode in all versions up to, and including, 1.0.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-4216
The DIOT SCADA with MQTT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'diot' shortcode in all versions up to, and including, 1.0.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-4216 DIOT SCADA with MQTT <= 1.0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The DIOT SCADA with MQTT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'diot' shortcode in all versions up to, and including, 1.0.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-4216
CVE-2025-4216 : DIOT SCADA with MQTT plugin for WordPress has a Stored Cross-Site Scripting (XSS) in the plugin shortcodes. The vulnerability arises from insufficient input sanitization and output escaping on user-supplied attributes in the diot shortcode. It affects all versions up to and includ...
CVE-2025-4216 DIOT SCADA with MQTT <= 1.0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The DIOT SCADA with MQTT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'diot' shortcode in all versions up to, and including, 1.0.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
WordPress DIOT SCADA with MQTT plugin <= 1.0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang in WordPress Plugin DIOT SCADA with MQTT versions = 1.0.5.1...
PT-2025-25472 · Unknown +1 · Diot Scada +2
Name of the Vulnerable Software and Affected Versions: DIOT SCADA with MQTT plugin for WordPress versions up to, and including, 1.0.5.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the...
WordPress plugin DIOT SCADA with MQTT 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress DIOT SCADA with MQTT plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...
CVE-2025-4216: Improper Neutralization of Input During Web Page Generation
The DIOT SCADA with MQTT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'diot' shortcode in all versions up to, and including, 1.0.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
Exploit for CVE-2024-8232
CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vul...
The vulnerability of the SCADA system Pult.online, related to insufficient restrictions on authentication attempts, allows a perpetrator to carry out an attack using brute-force methods.
The vulnerability of the SCADA system Pult.online is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor operating remotely to carry out an attack using brute-force methods...
CVE-2024-9414
In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions...
CVE-2024-47221
CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...
CVE-2024-7901
A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2024-21866
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific malformed request...