141 matches found
CVE-2026-36226
CVE-2026-36226：Advantech WebAccess/SCADA 创建新项目用户 XSS 概念验证 此仓库包含针对 CVE-2026-36226 的无害概念验证，该漏洞是 Advantech WebAccess/SCADA 8.0-2015.08.16 中的跨站脚本问题。 此仓库仅用于授权的安全研究和本地复现。请勿将其用于您不拥有或未经明确许可测试的系统。 概述 Advantech WebAccess/SCADA 8.0-2015.08.16 在管理仪表盘的创建新项目用户组件中存在一个跨站脚本漏洞。decryption...
CVE-2026-36226
Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...
Advantech WebAccess/SCADA 安全漏洞
Advantech WebAccess/SCADA is a SCADA software based on the browser architecture developed by Advantech China Research & Development. This software supports dynamic graphical displays and real-time data control, and provides functionality for remote control and management of automation devices. Th...
CVE-2026-36226: Undefined Security Weakness
Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...
CVE-2026-36226
Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...
The vulnerability of the Advantech WebAccss/SCADA SCADA system, related to the lack of protective measures for the SQL query structure, allows a perpetrator to execute arbitrary commands.
The vulnerability of the Advantech WebAccss/SCADA SCADA system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Advantech WebAccss/SCADA SCADA system, related to incorrect restrictions on the path to the restricted access catalog, allows a intruder to delete any files they want.
The vulnerability of the Advantech WebAccss/SCADA SCADA system is related to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...
CVE-2025-46268
Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands...
CVE-2025-67653 Advantech WebAccess/SCADA Path Traversal
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files...
CVE-2025-46268 Advantech WebAccess/SCADA SQL Injection
Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands...
CVE-2025-14848 Advantech WebAccess/SCADA Absolute Path Traversal
Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files...
CVE-2025-14849
CVE-2025-14849 affects Advantech WebAccess/SCADA. The vulnerability is an unrestricted file upload that could allow remote code execution. Public details in the provided documents do not specify affected versions or a patch; exploitation details are not disclosed.
CVE-2025-14849: Unrestricted Upload of File with Dangerous Type
Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code...
CVE-2025-67653: Improper Limitation of a Pathname to a Restricted Directory
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files...
PT-2025-52336
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a directory traversal issue. This could allow an attacker to delete arbitrary files. Recommendations At the moment, there is no...
CVE-2025-14850: Improper Limitation of a Pathname to a Restricted Directory
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files...
CVE-2025-14848: Absolute Path Traversal
Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files...
CVE-2025-46268: Improper Neutralization of Special Elements used in an SQL Command
Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands...
