93 matches found
CVE-2021-26828_ScadaBR_RCE
POC CVE-2021-26828ScadaBRRemoteCodeExecution ScadaBR 0.9.1 на Linux и от 1.0 до 1.12.4CE на Windows позволяет удаленным аутентифицированным пользователям загружать и выполнять произвольные JSP-файлы через 'viewedit.shtm' и удаленное выполнение кода. Использование эксплойта Команды: Windows: $ sud...
CVE-2026-94148
A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/exportproject.htm of the component Export Project Endpoint. This manipulation causes information disclosure. The attack can be initiated remotely. The exploit has been...
CVE-2021-26828-Ultimate
ScadaFlare - Набор инструментов для аутентифицированного RCE CVE-2021-26828 Модульный эксплойт аутентифицированного RCE, нацеленный на ScadaBR 1.1.0, расширенный для операций красных команд. Возможности Загрузка вооруженной оболочки .jsp через viewedit.shtm Поддержка нагрузок для Linux и Windows...
CVE-2026-94148
ScadaBR versions up to 1.1 are affected by an information disclosure vulnerability in the Export Project Endpoint . The function EmportDwr.createExportJSON in /ScadaBR/export_project.htm was left unprotected, while the corresponding import path was already gated with Permissions.ensureAdmin(). Th...
EUVD-2026-83857
A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/exportproject.htm of the component Export Project Endpoint. This manipulation causes information disclosure. The attack can be initiated remotely. The exploit has been...
CVE-2026-94148 ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure
A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/exportproject.htm of the component Export Project Endpoint. This manipulation causes information disclosure. The attack can be initiated remotely. The exploit has been...
CVE-2026-9645-ScadaBR-Analysis
CVE-2026-9645 — Анализ уязвимости ScadaBR Технический анализ уязвимости и брифинг по CVE для CVE-2026-9645 , затрагивающего платформу SCADA/HMI с открытым исходным кодом ScadaBR. Обзор CVE-2026-9645 — критическая уязвимость удалённого выполнения кода после аутентификации в ScadaBR. Согласно...
CVE-2026-8602
In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings...
CVE-2026-8604
In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage...
CVE-2026-9646 ScadaBR Unauthenticated Reflected Cross-Site Scripting
A reflected cross-site scripting issue exists in URL handling...
CVE-2026-9646
CVE-2026-9646 describes a reflected cross-site scripting issue in URL handling affecting ScadaBR (Unauthenticated). Root cause: insufficient sanitization/validation of URL input leading to reflected script execution. Impact: low confidentiality and integrity impact; no availability impact reporte...
CVE-2026-9645
Technical details about CVE-2026-9645 are not publicly available in the provided documents. No explicit affected product/version or root cause is disclosed here. Monitor for updates from the sources.
CVE-2026-9645 ScadaBR Authenticated Remote Code Execution
Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root...
Sensorweb ScadaBR 安全漏洞
Sensorweb ScadaBR is a set of open-source software developed by Sensorweb Corporation, designed for developing automated data acquisition and monitoring applications. Sensorweb ScadaBR has a security vulnerability, which stems from a reflection-type cross-site scripting issue in URL processing...
Sensorweb ScadaBR 安全漏洞
Sensorweb ScadaBR is a set of open-source software developed by Sensorweb Corporation, designed for developing automated data acquisition and monitoring applications. There is a security vulnerability in Sensorweb ScadaBR. This vulnerability stems from an exposed method that allows authenticated...
CVE-2026-8604
In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage...
CVE-2026-8605 Use of Hard-coded Credentials in ScadaBR
In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...
CVE-2026-8605
In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...
