11712 matches found
ICSSecurityScripts
ICSSecurityScripts Industrial Security Scripts Beckhoff-CX9020-WebControl.py: Controlling the Beckhoff CX9020 Windows CE PLC FullBeckhoffScan.py: Elaborate script for scanning AND hacking Beckhoff PLCs PhoenixControlPLC-ILC150.py: Print out CPU status and reverts it, tested and working on ILC150 ...
fluffi
FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...
CVE-2015-5374-DoS-PoC
CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...
Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting
A cross-site scripting vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. id: CVE-2014-2908 info: name: Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting author:...
SINEMA Remote Connect Server < V2.0 - Open Redirect
A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks. id: CVE-2022-23102...
APOLOGEE
🌀 APOLOGEE - Siemens Field Panel Scanner: APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers all versions prior to V3.5 and TALON TC BACnet Automation Controllers all versions prior to V3.5. With a 7.5 CVSS, thi...
CVE-2026-41551
Reproducción de CVE-2026-41551 Vulnerabilidad: recorrido de ruta relativa en los servicios fileserver / fileserver2 de Siemens ROS CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Versiones afectadas: todas las versiones de ros-sharp name.substr10; // elimina "package://"...
fluffi
FLUFFI FLUFFI - Un fuzzer binario evolutivo distribuido para pentesters. Acerca del proyecto Visión general de alto nivel Tutorial para principiantes Primeros pasos Uso HOWTOs Detalles técnicos Contribuir a FLUFFI LICENCIA Bugs encontrados Hasta ahora, FLUFFI se ha utilizado casi exclusivamente e...
Stuxnet
Stuxnet This repository contains a strictly educational and research-oriented reconstruction of the infamous Stuxnet worm. It is the product of countless hours of reverse engineering work conducted by the global security research community on the original binary samples discovered in 2010...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4shell-audit...
Siemens Teamcenter 2412.x < 2412.0013 / 2506.x < 2506.0010 / 2512.x < 2512.2607 / 2606.x < 2606.2607 XSS (SSA-157465)
The version of Siemens Teamcenter installed on the remote host is 2412.x prior to 2412.0013, or 2506.x prior to 2506.0010, or 2512.x prior to 2512.2607, or 2606.x prior to 2606.2607. It is, therefore, affected by a reflected cross-site scripting vulnerability. Affected applications do not properl...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell direct-impact fixture Deliberately vulnerable, non-...
Vulnerabilities present in Siemens products
Siemens has identified vulnerabilities in various products such as Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS, and Siveillance. These vulnerabilities allow malicious actors to carry out attacks that can cause the following types of damage: Denial-of-Service DoS attacks Data manipulation Evasio...
Siemens Siveillance Control
SUMMARY A vulnerability has been identified in the Open Interface Services OIS web module affecting Siveillance Control and Siveillance Control Pro versions OIS 3.x.y and OIS 4.x.y . This vulnerability allows an attacker to upload arbitrary files, which can lead to unauthorized root-level access...
Siemens Industrial Edge Management
SUMMARY Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification. Siemens has released new versions for the affected products...
Siemens SIPLUS and SIMATIC Products
SUMMARY Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where...
Siemens Teamcenter
SUMMARY A reflected cross site scripting vulnerability in the authentication redirect flow /auth/ of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation may enable the attacker to read...
Siemens SIMOVE Fleetmanager and SIPLANT
SUMMARY SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a...
Siemens Desigo CC family
SUMMARY A Client Code Execution CCE vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that...