VulnCheck KEV: CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

VulnCheck KEV: CVE-2021-26828

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

EUVD-2021-13614

Malware in sbrugna...

EUVD-2019-7118

Malware in sbrugna...

EUVD-2019-7107

Malware in sbrugna...

ScadaFlare 1.0 ScadaBR Authenticated RCE Toolkit

This is a modular post-authentication remote code execution exploit targeting ScadaBR versions prior to 1.1.0. This tool is enhanced for red team ops...

CVE-2021-26828

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

ScadaBR Credentials Dumper

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ScadaBR Credentials Dumper', 'Description' = %q This module retrieves credentials from ScadaBR, including service credentials and unsalted SHA1...

Unspecified Vulnerability in OpenPLC ScadaBR

OpenPLC is an open source programmable logic controller. A security vulnerability exists in OpenPLC ScadaBR, which can be exploited by an attacker to run stored XSS via the systemsettings.shtm page...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

CVE-2021-26828

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

Design/Logic Flaw

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

Cross site scripting

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

CVE-2021-26828

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via viewedit.shtm...

CVE-2021-26828

CVE-2021-26828 affects ScadaBR/OpenPLC ScadaBR up to 0.9.1 (Linux) and 1.12.4 (Windows). The flaw allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm, i.e., unrestricted file upload leading to remote code execution. Exploitation status varies across sour...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...

CVE-2021-26829

OpenPLC ScadaBR is vulnerable to a stored cross-site scripting (XSS) flaw via system_settings.shtm in Linux 0.9.1 and Windows 1.12.4. Root cause: input reflected/stored in the page enabling script execution in a user’s browser. Affected products/versions include OpenPLC ScadaBR prior to a newer r...

PT-2021-17153

Name of the Vulnerable Software and Affected Versions OpenPLC ScadaBR versions through 0.9.1 on Linux and through 1.12.4 on Windows. Description OpenPLC ScadaBR is affected by a stored cross-site scripting XSS vulnerability in the system settings.shtm file. This flaw allows attackers to execute...

PT-2021-3504

Name of the Vulnerable Software and Affected Versions OpenPLC ScadaBR versions through 0.9.1 on Linux OpenPLC ScadaBR versions through 1.12.4 on Windows Description The ScadaBR system, designed for data collection and process automation control, is affected by multiple issues. One issue involves...