CVE-2021-26829

OpenPLC ScadaBR is vulnerable to a stored cross-site scripting (XSS) flaw via system_settings.shtm in Linux 0.9.1 and Windows 1.12.4. Root cause: input reflected/stored in the page enabling script execution in a user’s browser. Affected products/versions include OpenPLC ScadaBR prior to a newer r...

PT-2021-17153

Name of the Vulnerable Software and Affected Versions OpenPLC ScadaBR versions through 0.9.1 on Linux and through 1.12.4 on Windows. Description OpenPLC ScadaBR is affected by a stored cross-site scripting XSS vulnerability in the system settings.shtm file. This flaw allows attackers to execute...

OpenPLC ScadaBR 跨站脚本漏洞

OpenPLC is an open source programmable logic controller. A security vulnerability exists in OpenPLC ScadaBR, which can be exploited by an attacker to run stored XSS via the systemsettings.shtm page...

PT-2021-3504

Name of the Vulnerable Software and Affected Versions OpenPLC ScadaBR versions through 0.9.1 on Linux OpenPLC ScadaBR versions through 1.12.4 on Windows Description The ScadaBR system, designed for data collection and process automation control, is affected by multiple issues. One issue involves...

Sensorweb ScadaBR 代码问题漏洞

Sensorweb ScadaBR is a suite of open source software for developing automated data acquisition and monitoring applications from Sensorweb, Inc. A code issue vulnerability exists in ScadaBR 1.0 / 1.1CE. The vulnerability stems from a lack of effective privilege licensing and access control measure...

ScadaBR 1.0 / 1.1CE Linux Shell Upload

!/usr/bin/python Exploit Title: Authenticated Arbitrary File Upload Remote Code Execution Google Dork: N/A Date: 04/21 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Software Link: Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on:...

ScadaBR 1.0 / 1.1CE Windows Shell Upload Exploit

!/usr/bin/python Exploit Title: Authenticated Arbitrary File Upload Remote Code Execution Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Software Link: https://www.scadabr.com.br/ Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on: Windows7,...

ScadaBR 1.0 / 1.1CE Windows Shell Upload

!/usr/bin/python Exploit Title: Authenticated Arbitrary File Upload Remote Code Execution Google Dork: N/A Date: 03/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Software Link: https://www.scadabr.com.br/ Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for...

ScadaBR 1.0 / 1.1CE Linux Shell Upload Exploit

!/usr/bin/python Exploit Title: Authenticated Arbitrary File Upload Remote Code Execution Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Software Link: Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on: Debian9,10Ubuntu16.04 CVE : CVE-2021-2682...

ScadaBR 1.0 Shell Upload

Exploit Title: ScadaBR 1.0 - Arbitrary File Upload Authenticated 1 Date: 03/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on: Windows7, Windows10 !/usr/bin/python import requests,sys,time if...

ScadaBR 1.0 - Arbitrary File Upload (Authenticated) Exploit (1)

Exploit Title: ScadaBR 1.0 - Arbitrary File Upload Authenticated 1 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on: Windows7, Windows10 !/usr/bin/python import requests,sys,time if lensys.argv...

ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1)

Exploit Title: ScadaBR 1.0 - Arbitrary File Upload Authenticated 1 Date: 03/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on: Windows7, Windows10 !/usr/bin/python import requests,sys,time if...

ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2)

Exploit Title: ScadaBR 1.0 - Arbitrary File Upload Authenticated 2 Date: 04/21 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on: Debian9,10Ubuntu16.04 !/usr/bin/python import requests,sys,time if...

ScadaBR 1.0 - Arbitrary File Upload (Authenticated) Exploit (2)

Exploit Title: ScadaBR 1.0 - Arbitrary File Upload Authenticated 2 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.scadabr.com.br/ Version: ScadaBR 1.0, ScadaBR 1.1CE and ScadaBR 1.0 for Linux Tested on: Debian9,10Ubuntu16.04 !/usr/bin/python import requests,sys,time if lensys.argv...

Exploit for Unrestricted Upload of File with Dangerous Type in Openplcproject Scadabr

POC CVE-2021-26828ScadaBRRemoteCodeExecution - ScadaBR 0.9...

Exploit for Unrestricted Upload of File with Dangerous Type in Openplcproject Scadabr

POC CVE-2021-26828ScadaBRRemoteCodeExecution - ScadaBR 0.9...

Exploit for Unrestricted Upload of File with Dangerous Type in Openplcproject Scadabr

POC CVE-2021-26828ScadaBRRemoteCodeExecution - ScadaBR 0.9...

CVE-2019-16344

A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...

CVE-2019-16344

A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...