11405 matches found
ICSSecurityScripts
ICSSecurityScripts 工业安全脚本 Beckhoff-CX9020-WebControl.py: 控制 Beckhoff CX9020 Windows CE PLC FullBeckhoffScan.py: 用于扫描和攻击 Beckhoff PLC 的复杂脚本 PhoenixControlPLC-ILC150.py: 打印 CPU 状态并将其还原，已在 ILC150 上测试并正常工作（在其他型号上至少部分可工作） PhoenixControlPLC-ILC390.py: 打印 CPU 状态并将其还原，已在 ILC390 上测试并正常工作（在其他型号上至少部分可工作）...
fluffi
FLUFFI FLUFFI - ペネトレーションテスター向け分散進化的バイナリファザー プロジェクトについて 高レベルの概要 初心者向けチュートリアル 始め方 使い方 HOWTOs 技術詳細 FLUFFIへの貢献 ライセンス 発見されたバグ これまでのところ、FLUFFIはほぼ独占的にSIEMENSの製品およびソリューションで使用されてきました。そこで発見されたバグは公開されません。 しかし、FLUFFIは以下の公開されたバグを発見しています（このリストを最新に保つためにご協力ください）： bcshiftaddsubにおけるバッファアンダーフローCVE-2019-11046...
fluffi
FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...
CVE-2015-5374-DoS-PoC
CVE-2015-5374 Siemens SIPROTEC 4 和 SIPROTEC Compact EN100 以太网模块 CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit 模块 该模块向端口 50000/UDP 发送特制数据包，可能导致受影响的设备发生拒绝服务。需要手动重启才能将设备恢复到服务状态。 验证步骤 1. 执行：use auxiliary/dos/scada/siemenssiprotec4 2...
Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting
A cross-site scripting vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. id: CVE-2014-2908 info: name: Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting author:...
SINEMA Remote Connect Server < V2.0 - Open Redirect
A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks. id: CVE-2022-23102...
APOLOGEE
🌀 APOLOGEE - シーメンスフィールドパネルスキャナー: APOLOGEEは、シーメンスAPOGEE PXC BACnet自動制御コントローラ（V3.5より前の全バージョン）およびTALON TC BACnet自動制御コントローラ（V3.5より前の全バージョン）の隠しディレクトリを列挙するPythonスクリプトおよびMetasploitモジュールです。CVSS 7.5のこのエクスプロイトにより、攻撃者は代替パスまたはチャネルを使用して認証バイパスを実行し、Webサーバーの隠しディレクトリにアクセスできます。このリポジトリはCVE-2017-9947を利用しています。...
CVE-2026-41551
CVE-2026-41551 复现 漏洞：Siemens ROS fileserver / fileserver2 服务相对路径遍历 CVSS v3.1：9.1 （AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N） 影响版本：ros-sharp 所有 name.substr10; // 去掉 "package://" std::string package = address.substr0, address.find"/"; std::string filepath = address.substrpackage.length;...
Vulnerabilities present in Siemens products
Siemens has identified vulnerabilities in various products such as Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS, and Siveillance. These vulnerabilities allow malicious actors to carry out attacks that can cause the following types of damage: Denial-of-Service DoS attacks Data manipulation Evasio...
Stuxnet
Stuxnet 本仓库包含对臭名昭著的 Stuxnet 蠕虫的纯教育和研究用途重构。它是全球安全研究社区对 2010 年发现的原始二进制样本进行无数小时逆向工程工作的成果。 免责声明：本代码仅供学术研究、恶意软件分析培训和防御性研究使用。它不旨在用于任何恶意目的，也不是可部署的恶意软件。作者和贡献者不纵容任何非法或不道德的活动。 目录 概述 核心组件 技术架构 构建说明 用法 法律与许可证 致谢 概述 Stuxnet 被广泛认为是首个旨在对工业控制系统（ICS）造成物理破坏的已知网络武器。它专门针对西门子 Step 7 软件和 S7-300/400...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell Exploitation Lab CVE-2021-44228 Reproduced the Lo...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228 lab This repository contains a small...
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder...
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence AI-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers PLCs to conduct reconnaissance and...
Siemens Solid Edge SE2025 < V225.0 Update 15 / SE2026 < V226.0 Update 7 Multiple Vulnerabilities (SSA-621657)
The version of Siemens Solid Edge installed on the remote Windows host is SE2025 prior to V225.0 Update 15, or SE2026 prior to V226.0 Update 7. It is, therefore, affected by multiple file parsing vulnerabilities: - The affected applications contains an out of bounds read vulnerability while parsi...
CVE-2026-69109
A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...
CVE-2026-69108
A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...
Vulnerabilities present in Siemens products
Siemens has identified vulnerabilities in various products, including Desigo, Parasolid, RUGGEDCOM, SIMATIC, Siveillance, and Solid Edge. These vulnerabilities enable malicious actors to carry out attacks that can cause the following types of damage: - Denial-of-Service DoS attacks - Data...
CVE-2026-69109
A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...
